HackingStolen CredentialsSupply Chain (3P Vendor)Employee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
MARRIOTT INTERNATIONAL, INC.
bd_90d11629dfeffc0c · schema v1 · pii pii-v1
Full breach record for MARRIOTT INTERNATIONAL, INC. →Marriott International notified California residents that an unknown person accessed associate information via a third-party vendor's network. The incident, discovered on September 4, 2019, involved names, addresses, and Social Security numbers of 1,552 California residents. Marriott terminated the vendor relationship and offered one year of identity monitoring.
California clockDiscovered Sep 4, 2019 → Notified Oct 30, 201956d ✓ CA 60-day OK8 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,552 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-183963
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 30, 2019
- Raw hash
- 48277a286d44a58c310693a7aaef585cb24b861b30b6ef55c28cb09e8afba539
Reporting entity
- Name
- MARRIOTT INTERNATIONAL, INC.norm: marriott international
- Domain
- marriott.com
Victim entity
- Name
- MARRIOTT INTERNATIONAL, INC.norm: marriott international
- Domain
- marriott.com
Incident
- Discovered
- Sep 4, 2019
- Materiality determined
- —
- Notification sent
- Oct 30, 2019
- Affected individuals
- 1,552
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Outside vendor formerly used by Marriott
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 56d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 4, 2019→ Notified: Oct 30, 201956d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.