Marriott International

5 breaches500M affected in allHospitalitymarriott.com

Social engineering at a Marriott hotel leads to theft of guest and card dataPhishing exposed payment cards and internal documents.PhishingHospitalityUSUnverifiedJul 6, 2022 Breach, details not statedBreach notice filed with the California AG, details not stated.2,589 affectedHospitalityUSOct 30, 2019 Starwood reservation database breach; UK ICO fine, FTC order and USD 52M states settlementHacking exposed names, addresses, phone numbers, emails, government IDs, dates of birth, payment cards and financial details. Reported to the California AG.Hacking500M affectedHospitalityUSNov 30, 2018 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.75 affectedHospitalityUSOct 16, 2017 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.70 affectedHospitalityUSOct 19, 2015

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages, the company profile.

notice_affected2026-09-25

Marriott International, 2018-11-30in-ag: 500000000 (restored: the portal's own figure)

notice_affected2026-09-25

Marriott International, 2018-11-30or-doj: 500000000 (restored: the portal's own figure)

notice_affected2026-09-25

Marriott International, 2018-11-30

notice_affected2026-09-25

Marriott International, 2018-11-30

data_types2026-09-25

Marriott International, 2018-11-30["names","addresses","phone","emails","government-id","dob","payment-card","other","financial"]

Added2026-09-25

Marriott International, 2015-10-19

Added2026-09-25

Marriott International, 2017-10-16

source2026-09-25

Marriott International, 2018-11-30https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2018.pdf

records_basis2026-09-25

Marriott International, 2019-10-30organization

records2026-09-25

Marriott International, 2019-10-302589

occurred2026-09-25

Marriott International, 2019-10-302019-08-01

fine_usd2026-09-25

Marriott International, 2018-11-3075800000

lawsuit2026-09-25

Marriott International, 2018-11-30ICO fine of about USD 23.8M (Oct 2020); USD 52M multistate AG settlement and FTC order (Oct 2024)

data_types2026-09-25

Marriott International, 2018-11-30["names","addresses","phone","emails","government-id","dob","payment-card","other"]

summary2026-09-25

Marriott International, 2018-11-30Attackers had been in Starwood's guest reservation database since 2014, before Marriott bought Starwood, exposing up to 339 million guest records including passport numbers until discovery in November 2018. The ICO issued a final fine of ab

title2026-09-25

Marriott International, 2018-11-30Starwood reservation database breach; UK ICO fine, FTC order and USD 52M states settlement

status2026-09-25

Marriott International, 2018-11-30settled

lawsuit2026-09-25

Marriott International, 2018-11-3018.4M GBP ICO GDPR fine (2020)

attack2026-09-25

Marriott International, 2018-11-30hacking

data_types2026-09-25

Marriott International, 2018-11-30["names","addresses","phone","emails","government-id","dob","payment-card"]

records_basis2026-09-25

Marriott International, 2018-11-30organization

records2026-09-25

Marriott International, 2018-11-30500000000

summary2026-09-25

Marriott International, 2018-11-30Marriott said there had been unauthorized access to the Starwood guest reservation network since 2014, affecting up to about 500 million guests; for about 327 million the data included passport numbers and other details, and some records he

title2026-09-25

Marriott International, 2018-11-30Starwood reservation database breach exposes up to 500 million guests

Added2026-09-25

Marriott International, 2022-07-06

domain2026-09-25

Marriott Internationalmarriott.com

discovered2026-09-25

Marriott International, 2018-11-302018-11-19

Added2026-09-25

Marriott International, 2018-11-30

Added2026-09-25

Marriott International, 2019-10-30

Added2026-09-25

Marriott International