Security News > 2022 > July > Marriott confirms data breach and a failed extortion attempt
Hotel giant Marriott International confirmed it was hit by another data breach after an unknown threat actor breached one of its properties and stole 20GB of files.
"The threat actor used social engineering to trick one associate at a single Marriott hotel into providing access to the associate's computer. The threat actor did not impersonate any Marriott vendor."
Marriott is yet to share if the threat actor exfiltrated info belonging to the hotel's guests, its employees, or both.
The hotel giant added that it would notify relevant data regulators and roughly 300-400 individuals affected by this data breach.
This is the third data breach Marriott has confirmed since 2018 after exposing the personal information of 5.2 million hotel guests in a data breach it disclosed in 2020.
Marriott discovered the incident two years after Starwood's acquisition and said the information stolen in the incident included guests' names, personal info, addresses, unencrypted passport numbers, and AES-128-encrypted payment information.
News URL
Related news
- Free, France’s second largest ISP, confirms data breach after leak (source)
- Interbank confirms data breach following failed extortion, data leak (source)
- How to Effectively Manage a Data Breach (source)
- Amazon confirms employee data breach after vendor hack (source)
- HIBP notifies 57 million people of Hot Topic data breach (source)
- US space tech giant Maxar discloses employee data breach (source)
- Fintech giant Finastra investigates data breach after SFTP hack (source)
- Bologna FC confirms data breach after RansomHub ransomware attack (source)
- Rhode Island confirms data breach after Brain Cipher ransomware attack (source)
- Texas Tech University System data breach impacts 1.4 million patients (source)