The resort says any visitors between April 23, 2014 and Jan. 21, 2015 who used a credit card may have had their information stolen.
Goodwill's investigation into the data breach from earlier this year revealed 11 stores in southern Indiana were affected.
The Indiana University Police Department has received nine reports of credit card fraud in just the past few days.
A new law allows businesses to pass on credit card fees to their customers, but many say they're too worried they'd lose business if they did.
The caller claims to be from a credit union and requests bank information.
The new rules will limit credit card use to spending money previously appropriated for a particular purchase.
Ellettsville is tightening its credit card use policies after Monroe County officials were accused of using county credit cards for personal use.