Marriott: Data on 500 Million Guests Stolen in 4-Year Breach
Summary: Marriott disclosed that unauthorized access to a Starwood reservations database exposed personal and financial information on as many as 500 million guests, with the intruders believed to have been inside the company's networks since 2014. For approximately 327 million of those guests, the data includes some combination of name, mailing address, phone number, email address, passport number, Starwood Preferred Guest account information, date of birth, gender, arrival and departure information, reservation date and communication preferences.
Bottom line: The intruders encrypted the stolen database, likely to evade data-loss prevention tools on the way out, and Marriott could not rule out that they also took the encryption keys protecting customer payment card data.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026