What the Marriott Breach Says About Security
Summary: Marriott disclosed a four-year-long breach affecting the personal and financial information of 500 million guests of its Starwood hotel properties, with the root cause not yet known. Krebs argues the usual cause of such long-undetected intrusions is a failure to adopt the principle of assuming you are compromised, and notes Marriott is offering affected consumers a year of service from a Kroll-owned company that scours cybercrime underground markets for stolen data.
What's compelling: The breach ran undetected for four years and exposed 500 million guest records, and Krebs notes there are currently few consequences when large companies fail badly on security, leaving consumers to absorb the harm. Senator Mark Warner's response calls for data minimization and data security laws so companies bear the cost rather than consumers.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026