MARRIOTT INTERNATIONAL, INC.

Marriott International disclosed a security incident involving the Starwood Guest Reservation Database. Unauthorized access occurred starting in 2014. In 2018, an unauthorized party copied and encrypted data, demanding ransom. Marriott decrypted the data, confirming it came from the Starwood database. Approximately 500 million guests were affected, with 327 million having names, addresses, passport numbers, and some having encrypted payment card data. Marriott engaged security experts, notified law enforcement, and offered one year of WebWatcher monitoring.

Affected (this filing): 500,000,000

Marriott International, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2018-11-30. The breach occurred during 4/15/2014 - 4/15/2014. The breach was discovered on 11/19/2018. 500,000,000 individuals were affected. Notice was sent on 11/30/2018.

Affected (this filing): 500,000,000