Marriott International & Starwood Hotels data breach – November 2018

In November 2018, the personal data of up to half a billion guests of Marriott International may have been exposed by one of the largest data breaches on record.

Marriot International is the world’s largest hotel company and constitutes a number of hotel brands that were centralised in their Starwood Hotels room reservation system. This reservation was the epicentre of a major hack in 2014 which has been ongoing since that time. Of the 500 million people affected, over 300 million of these will have had extremely sensitive data lost including passport numbers, date of birth and mailing addresses. Even more alarming, the hotel chain wasn’t able to rule out that credit card details had also been lost.

The following hotel databases were breached as a result of the hack:

  • W Hotels
  • St. Regis
  • Sheraton Hotels & Resorts
  • Westin Hotels & Resorts
  • Element Hotels
  • Aloft Hotels
  • The Luxury Collection
  • Tribute Portfolio
  • Le Méridien Hotels & Resorts
  • Four Points by Sheraton
  • Design Hotels that participate in the Starwood Preferred Guest (SPG) program
  • Starwood branded timeshare properties are also included.

This Data Breach marks one of the first major hack of its kind to have occurred in a post-GDPR world and has raised many questions as to how such a breach occurred and how long it took to Marriott to inform their client base. Although the hackers are suspected of breaching the Starwood computer network at some point in 2014, Marriott were first alerted about the hack in September 2018. On November 19th 2018 Marriott confirmed that a data breach had taken place, but it wasn’t until 30th November 2018 that they took the necessary steps to inform those who had been affected.

If you suspect that your personal data was lost in the Starwood Hotels security breach then you have the right to claim compensation for their negligent handling of your information. If have received an email from Marriott informing you of this data loss then get in contact with us so that we can help you take your claim to the next stage.

Data Breaches Help is run by Cobleys Solicitors Ltd., one of the largest specialist litigation practice on Merseyside and recommended by The Times as one of the Top 200 Law Firms in the UK.