Security News > 2022 > July > Marriott confirms data breach and a failed extortion attempt

Hotel giant Marriott International confirmed it was hit by another data breach after an unknown threat actor breached one of its properties and stole 20GB of files.

"The threat actor used social engineering to trick one associate at a single Marriott hotel into providing access to the associate's computer. The threat actor did not impersonate any Marriott vendor."

Marriott is yet to share if the threat actor exfiltrated info belonging to the hotel's guests, its employees, or both.

The hotel giant added that it would notify relevant data regulators and roughly 300-400 individuals affected by this data breach.

This is the third data breach Marriott has confirmed since 2018 after exposing the personal information of 5.2 million hotel guests in a data breach it disclosed in 2020.

Marriott discovered the incident two years after Starwood's acquisition and said the information stolen in the incident included guests' names, personal info, addresses, unencrypted passport numbers, and AES-128-encrypted payment information.

News URL

https://www.bleepingcomputer.com/news/security/marriott-confirms-data-breach-and-a-failed-extortion-attempt/