You are here: Home - Household Bills - News -

Marriott International fined £18m over data hack

Written by:
Hotel group Marriott International Inc has been fined £18.4m after a large-scale data breach which went undetected for years, leaving millions of customers’ personal data at risk.

The Information Commissioner’s Office (ICO) has fined the group for failing to keep an estimated 339 million worldwide guests’ records secure – seven million in the UK alone.

Personal data exposed may have included names, email addresses, phone numbers, unencrypted passport numbers, arrival/departure information, guests’ VIP status and loyalty programme membership number.

Marriott revealed an internal investigation had shown that a hacker had been able to access the guest reservation database of its Starwood division in the US since 2014. Marriott acquired Starwood in 2016, but the exposure of customer information was not discovered until 2018.

The ICO’s investigation found there were failures by Marriott to put appropriate technical or organisational measures in place to protect the personal data being processed on its systems, as required by the General Data Protection Regulation (GDPR).

While the attack was traced back to 2014, the £18.4m penalty only relates to the breach from 25 March 2018, when new rules under GDPR came into effect.

The ICO said Marriott acted promptly to contact customers and the ICO about the breach. It also acted quickly to mitigate the risk of damage suffered by customers, and has since instigated a number of measures to improve the security of its systems.

Information commissioner, Elizabeth Denham, said: “Personal data is precious and businesses have to look after it. Millions of people’s data was affected by Marriott’s failure; thousands contacted a helpline and others may have had to take action to protect their personal data because the company they trusted it with had not.

“When a business fails to look after customers’ data, the impact is not just a possible fine, what matters most is the public whose data they had a duty to protect.”

The fine of £18.4m was reduced from the original fine of £99m when the ICO published an intent to fine notice in July 2019.

‘Marriott deeply regrets the incident’

Marriott said it does not intend to appeal the decision and noted that the decision does not find any evidence of harm to any individuals.

A Marriott International spokesperson, said: “Marriott remains committed to the privacy and security of its guests’ information and continues to make significant investments in security measures for its systems.

“The ICO recognises the steps taken by Marriott following discovery of the incident to promptly inform and protect the interests of its guests.”

Related Posts

There are 0 Comment(s)

If you wish to comment without signing in, click your cursor in the top box and tick the 'Sign in as a guest' box at the bottom.

Everything you need to know about being furloughed

Few people had heard of ‘furlough’ before March 2020, but the coronavirus pandemic thrust the idea of bein...

The savings accounts paying the most interest

If one of your jobs this month is to get your finances in order, moving your savings to a higher paying deal i...

Coronavirus and your finances: what help can you get in the second lockdown?

News and updates on everything to do with coronavirus and your personal finances.

What will happen if rates change

How your finances will be impacted by a rise in interest rates.

Regular Savings Calculator

Small regular contributions can build up nicely over time.

Online Savings Calculator

Work out how your online savings can build over time.

Having a baby and your finances: seven top tips

We’re guessing the Duchess of Cambridge won’t be fretting about maternity pay or whether she’ll still be...

Protecting family wealth: 10 tips for cutting inheritance tax

Inheritance tax - sometimes known as 'death tax' - can cause even more heartache for bereaved families. But th...

Travel insurance: Five tips to ensure a successful claim

Ahead of your summer holiday, it’s important to make sure you have the right level of travel cover or you co...

Money Tips of the Week

Read previous post:
Lifetime mortgage fees probed over fears Covid may increase unsuitable advice

The regulator is to investigate whether fees charged by later life lending brokers are ‘excessive’ as part of a further...