Marriott Starwood breach exposes customer passport data and more
A data breach occurred at Marriott's Starwood in 2018, and the leak of customers' passport information went undetected for four years. Marriott admitted that for five years it had wrongly claimed that encryption was in use at the time. It later agreed to pay $52 million and strengthen security to settle investigations into the breach, and in 2025 it won an order from a US appeals court voiding a related class action.
Key facts
- Affected organisation
- Marriott
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Data including customer passport information
- Cause / method
- Not confirmed
- Location
- Other countries
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Marriott admitted that for five years it had wrongly claimed it used encryption at the time of the 2018 breach.
- Marriott agreed to pay $52 million and strengthen security to settle investigations into the data breach.
- Marriott won an order from a US appeals court voiding the data breach class action.
14 related reports
- Marriott admits it falsely claimed for five years it was using encryption during 2018 breach
- AG Yost Announces $52 Million Agreement with Marriott Over Data Breach
- US FTC says Marriott will boost security to settle data breach charges
- Marriott agrees to pay $52 million, beef up data security to resolve probes over data breaches
- Marriott data breach settlement: What it means for consumers
- Marriott settles yearslong data breach with $52M for Oregon, other states: Here’s what to do
- Marriott required to pay $52 million, beef up information security in wake of data breaches
- Tennessee receiving nearly $1M from Marriott data breach settlement
- Marriott Gets $52 Million Slap On Wrist For Massive Security Breaches Due To ‘Lax Security’
- Marriott Settles With States for $52M Over 2018 Data Breach at Starwood
- Marriott will pay $52M, improve cybersecurity to settle multiple data breaches
- Marriott Agrees $52m Settlement for Massive Data Breach
- “고객 여권정보 새나갔는데 4년간 몰라”··· 메리어트, 데이터 유출 책임으로 700억원 벌금 지불
- Marriott wins US appeals order striking down data breach class action
Other incidents at Marriott
Marriott International data breach affects up to 5.2 million guests
5.2mImpact: Data of up to 5.2 million guests
Marriott International confirmed a data breach affecting up to 5.2 million guests. The date of the incident, the data exposed, the cause and any further response have not been confirmed.
Read on Sophos ↗Otelier data breach hits Marriott hotels
↳ Knock-on damage from the Otelier incident · View original incidentHotels of Marriott International, Inc. were affected by the Otelier data breach. Hilton hotels were also affected by the same incident.
Read on Top Class Actions ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.