Marriott reveals data breach of 500 million Starwood guests

Marriott says its guest reservation system has been hacked, potentially exposing the personal information of...

Posted: Nov 30, 2018 10:01 PM
Updated: Nov 30, 2018 10:02 PM

Marriott says its guest reservation system has been hacked, potentially exposing the personal information of approximately 500 million guests.

The hotel chain said Friday the hack affects its Starwood reservation database, a group of hotels it bought in 2016 that includes the St. Regis, Westin, Sheraton and W Hotels.

Companies

Hotel chains

Hotels and motels

Lodging

Marriott International Incorporated

Travel and tourism

Crime, law enforcement and corrections

Criminal offenses

Digital crime

Technology

Digital security

Marriott said hackers had gained "unauthorized access" to the Starwood reservation system since 2014, but the company only identified the issue last week.

"The company recently discovered that an unauthorized party had copied and encrypted information, and took steps towards removing it," Marriott said in a statement.

For 327 million people, Marriott says the guests' exposed information includes their names, phone numbers, email addresses, passport numbers, date of birth and arrival and departure information. For millions others, their credit card numbers and card expiration dates were potentially compromised.

Marriott warns that it can't confirm if the hackers were able to decrypt the credit card numbers.

"We fell short of what our guests deserve and what we expect of ourselves. We are doing everything we can to support our guests, and using lessons learned to be better moving forward," said CEO Arne Sorenson.

The hotel chain said it has reported the hack to law enforcement.

Marriott said it will begin emailing guests affected by the breach and has created an informational website. There's also a call center that's been set up.

The company said it's giving guests a free membership to WebWatcher, a personal information monitoring service. It's also telling guests to monitor their loyalty accounts for suspicious activity, change their account passwords and check credit card statements for unauthorized activity.

Today's revelation marks one of the biggest corporate data beaches in history. It's second behind one involving Yahoo, which said in 2017 that 3 billion accounts encompassing several of its brands were compromised. AdultFriendFinder revealed in 2016 that 412 million accounts were hacked.

Because the hack involves customers in the European Union and the United Kingdom, the company might be in violation of the recently enacted General Data Protection Regulation.

Mark Thompson, the global lead for consulting company KPMG's Privacy Advisory Practice, told CNN Business that hefty GDPR penalties will potentially be slapped on the company.

"The size and scale of this thing is huge," he said, adding that it's going to take several months for regulators to investigate the breach. He said there's a trend for class action lawsuits in these cases.

In the United States, the New York Attorney General's office said it has opened an investigation into the data breach. The office told CNN Business that the company hasn't yet notified the AG about the data breach, which is required under state law.

The attorneys general of Maryland and Pennsylvania have also said that they are investigating.

Marriott's (MAR) stock is plunging on the news, falling more than 6% in trading. The combined company has 6,700 properties in more than 129 countries.

Terre Haute
Scattered Clouds
50° wxIcon
Hi: 82° Lo: 58°
Feels Like: 50°
Robinson
Overcast
47° wxIcon
Hi: 80° Lo: 56°
Feels Like: 47°
Indianapolis
Clear
57° wxIcon
Hi: 80° Lo: 59°
Feels Like: 57°
Rockville
Clear
46° wxIcon
Hi: 81° Lo: 58°
Feels Like: 46°
Casey
Clear
53° wxIcon
Hi: 80° Lo: 58°
Feels Like: 53°
Brazil
Scattered Clouds
50° wxIcon
Hi: 81° Lo: 58°
Feels Like: 50°
Marshall
Scattered Clouds
50° wxIcon
Hi: 81° Lo: 57°
Feels Like: 50°
Clear, Cool Overnight
WTHI Planner
WTHI Temps
WTHI Radar

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Confirmed Cases: 283559

Reported Deaths: 8774
CountyConfirmedDeaths
Cook1414305187
DuPage17091554
Lake16636487
Will13720376
Kane12889325
St. Clair6421188
Winnebago5634149
Madison5511136
Champaign453820
McHenry4506118
Peoria335249
McLean322322
Rock Island290175
Kankakee269477
Sangamon231144
Unassigned2244236
Kendall196625
Tazewell167821
LaSalle165856
DeKalb152638
Macon145444
Coles141730
Williamson137142
Jackson125024
Clinton110120
Boone108223
Adams105510
Randolph92811
Effingham8481
Whiteside71320
Vermilion6734
Ogle6626
Grundy6545
Henry6475
Monroe64215
Morgan64023
Knox6313
Bureau61211
Jefferson58438
Marion5270
Macoupin5237
Franklin5143
Union50724
Stephenson4986
Christian46311
McDonough46015
Logan4481
Crawford4203
Woodford4126
Cass39311
Fayette3893
Jersey38714
Shelby3664
Iroquois35919
Livingston3556
Lee3531
Montgomery34813
Perry34215
Warren3192
Saline3073
Bond3045
Douglas2937
Wayne2645
Jo Daviess2532
Lawrence2522
Carroll2184
Greene2187
Moultrie2083
Cumberland2044
Jasper2039
Washington2031
Hancock2013
Richland1764
Pulaski1671
White1640
Fulton1570
Clark1562
Johnson1490
Wabash1491
Clay1420
Mason1341
Mercer1335
Piatt1320
Pike1211
Menard1200
Edgar1128
Massac1062
De Witt1051
Ford1005
Marshall990
Scott760
Alexander741
Gallatin712
Hamilton670
Henderson660
Edwards640
Putnam550
Stark542
Schuyler480
Calhoun470
Brown450
Hardin370
Pope261
Out of IL30

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Confirmed Cases: 114236

Reported Deaths: 3548
CountyConfirmedDeaths
Marion21067764
Lake10397321
Elkhart6477109
St. Joseph6312105
Allen6113201
Hamilton4803109
Vanderburgh353630
Hendricks2694123
Monroe253136
Tippecanoe234713
Johnson2291123
Clark218756
Porter210546
Cass19399
Delaware191861
Vigo180324
Madison161975
LaPorte140540
Floyd135161
Howard129263
Warrick123436
Kosciusko121117
Bartholomew115557
Marshall99724
Dubois96418
Boone96046
Hancock91743
Grant90334
Noble90032
Henry79326
Wayne75114
Jackson7469
Morgan70938
Shelby66829
Daviess65828
Dearborn64728
LaGrange63411
Clinton59514
Harrison56624
Putnam54211
Knox5139
Lawrence51028
Montgomery50721
Gibson4964
White48314
DeKalb46811
Decatur45839
Miami4313
Greene42235
Fayette41913
Jasper3902
Steuben3787
Scott36711
Sullivan33312
Posey3160
Jennings31212
Franklin30325
Clay2995
Orange28824
Ripley2878
Carroll27313
Wabash2638
Washington2631
Whitley2617
Starke2597
Adams2553
Wells2513
Jefferson2473
Fulton2352
Spencer2283
Huntington2253
Tipton22122
Perry21613
Randolph2117
Jay1760
Newton17211
Owen1681
Martin1640
Rush1544
Pike1431
Vermillion1270
Fountain1202
Pulaski1161
Blackford1143
Brown1043
Crawford1040
Parke972
Benton880
Ohio787
Union780
Switzerland690
Warren391
Unassigned0226