Marriott says 500 million Starwood accounts compromised

Marriott says its guest reservation system has been hacked, potentially exposing the personal information of approximately 500 million guests.

Posted: Nov 30, 2018 8:04 AM
Updated: Nov 30, 2018 12:18 PM


Marriott says its guest reservation system has been hacked, potentially exposing the personal information of approximately 500 million guests.

The hotel chain said Friday the hack affects its Starwood reservation database, a group of hotels it bought in 2016 that includes the St. Regis, Westin, Sheraton and W Hotels.

Marriott said hackers had gained "unauthorized access" to the Starwood reservation system since 2014, but the company only identified the issue last week.

"The company recently discovered that an unauthorized party had copied and encrypted information, and took steps towards removing it," Marriott said in a statement.

For 327 million people, Marriott says the guests' exposed information includes their names, phone numbers, email addresses, passport numbers, date of birth and arrival and departure information. For millions others, their credit card numbers and card expiration dates were potentially compromised.

Marriott warns that it can't confirm if the hackers were able to decrypt the credit card numbers.

"We fell short of what our guests deserve and what we expect of ourselves. We are doing everything we can to support our guests, and using lessons learned to be better moving forward," said CEO Arne Sorenson.

The hotel chain said it has reported the hack to law enforcement.

Marriott said it will begin emailing guests affected by the breach and has created an informational website. There's also a call center that's been set up.

The company said it's giving guests a free membership to WebWatcher, a personal information monitoring service. It's also telling guests to monitor their loyalty accounts for suspicious activity, change their account passwords and check credit card statements for unauthorized activity.

Today's revelation marks one of the biggest corporate data beaches in history. It's second behind one involving Yahoo, which said in 2017 that 3 billion accounts encompassing several of its brands were compromised. AdultFriendFinder revealed in 2016 that 412 million accounts were hacked.

Because the hack involves customers in the European Union and the United Kingdom, the company might be in violation of the recently enacted General Data Protection Regulation.

Mark Thompson, the global lead for consulting company KPMG's Privacy Advisory Practice, told CNN Business that hefty GDPR penalties will "likely" be slapped on the company.

"The size and scale of this thing is huge," he said, adding that it's going to take several months for regulators to investigate the breach, but that he expects class action lawsuits to quickly materialize.

In the United States, the New York Attorney General's office said it has opened an investigation into the data breach. The office told CNN Business that the company hasn't yet notified the AG about the data breach, which is required under state law.

The attorneys general of Maryland and Pennsylvania have also said that they are investigating.

Marriott's (MAR) stock is plunging on the news, falling more than 5% in early trading. The combined company has 6,700 properties in more than 129 countries.

Terre Haute
Broken Clouds
72° wxIcon
Hi: 84° Lo: 67°
Feels Like: 72°
Robinson
Clear
70° wxIcon
Hi: 84° Lo: 66°
Feels Like: 70°
Indianapolis
Broken Clouds
76° wxIcon
Hi: 85° Lo: 68°
Feels Like: 76°
Rockville
Clear
68° wxIcon
Hi: 83° Lo: 65°
Feels Like: 68°
Casey
Clear
73° wxIcon
Hi: 84° Lo: 66°
Feels Like: 73°
Brazil
Broken Clouds
72° wxIcon
Hi: 83° Lo: 67°
Feels Like: 72°
Marshall
Broken Clouds
72° wxIcon
Hi: 84° Lo: 66°
Feels Like: 72°
Partly cloudy with AM patchy fog.
WTHI Planner
WTHI Temps
WTHI Radar

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Confirmed Cases: 199893

Reported Deaths: 7881
CountyConfirmedDeaths
Cook1130444934
Lake12939449
DuPage12511522
Kane9948305
Will9486346
St. Clair4155162
Winnebago3806131
McHenry3279114
Madison277778
Kankakee180769
Rock Island178438
Peoria171736
Champaign170919
Kendall141223
Unassigned1395209
Sangamon132333
DeKalb95631
LaSalle82525
Boone77023
Jackson74020
McLean68615
Macon67823
Tazewell5818
Adams5806
Coles52021
Randolph4867
Williamson4547
Ogle4205
Clinton41917
Whiteside36717
Grundy3435
Stephenson3356
Monroe33213
Union33023
Knox3241
Jefferson30420
Morgan2866
Iroquois26912
Henry2621
Vermilion2492
Bureau2413
Cass23811
Macoupin2003
Franklin1981
Warren1940
Lee1861
Perry1853
Effingham1831
Montgomery1747
Woodford1703
Marion1690
Logan1661
McDonough14715
Christian1444
Saline1342
Jo Daviess1331
Livingston1303
Douglas1293
Jersey1222
Pulaski971
Moultrie930
Shelby901
Clark872
Mercer774
White720
Fayette713
Johnson700
Hancock681
Washington670
Greene660
Wayne662
Bond643
Carroll644
Piatt640
Jasper597
Menard580
Cumberland573
Mason570
Gallatin512
Lawrence510
Ford502
Massac420
Wabash420
Alexander370
Fulton370
De Witt340
Hamilton300
Crawford290
Edgar290
Marshall280
Clay270
Scott270
Pike260
Edwards240
Richland220
Schuyler190
Hardin180
Brown150
Henderson140
Putnam140
Calhoun110
Pope110
Stark70
Out of IL00

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Confirmed Cases: 76522

Reported Deaths: 3086
CountyConfirmedDeaths
Marion16194731
Lake7742281
Elkhart495586
Allen4040163
St. Joseph361083
Hamilton2887104
Vanderburgh205313
Hendricks1943108
Cass18069
Johnson1794119
Porter136239
Clark130750
Tippecanoe124511
Madison103066
LaPorte93530
Howard92065
Kosciusko87212
Floyd82249
Bartholomew82147
Marshall79423
Monroe76732
Delaware76052
Vigo71411
Dubois71312
Boone69746
Noble69029
Hancock68839
Jackson5975
Warrick58830
Shelby56828
LaGrange56610
Grant53130
Dearborn51628
Morgan48934
Clinton4504
Henry41820
Wayne38810
White37711
Montgomery36021
Lawrence35727
Harrison35224
Decatur34232
Putnam3218
Daviess27920
Miami2772
Scott27310
Jasper2572
Greene25434
Franklin24715
DeKalb2384
Gibson2334
Jennings22812
Steuben2153
Ripley2138
Carroll2003
Fayette1957
Perry18713
Posey1800
Starke1807
Orange17824
Wells1782
Fulton1732
Wabash1715
Jefferson1662
Knox1640
Whitley1566
Tipton14912
Washington1441
Sullivan1411
Spencer1393
Clay1315
Huntington1273
Randolph1274
Newton12110
Adams1172
Owen1051
Jay920
Rush894
Pulaski821
Fountain762
Brown752
Blackford662
Ohio656
Benton640
Pike620
Vermillion590
Parke551
Switzerland530
Martin500
Crawford450
Union410
Warren241
Unassigned0208