Security News > 2022 > July > Marriott hit by new data breach and a failed extortion attempt
Hotel giant Marriott International confirmed it was hit by another data breach after an unknown threat actor breached one of its properties and stole 20GB of files.
"The threat actor used social engineering to trick one associate at a single Marriott hotel into providing access to the associate's computer. The threat actor did not impersonate any Marriott vendor."
Marriott is yet to share if the threat actor exfiltrated info belonging to the hotel's guests, its employees, or both.
The hotel giant added that it would notify relevant data regulators and roughly 300-400 individuals affected by this data breach.
This is the third data breach Marriott has confirmed since 2018 after exposing the personal information of 5.2 million hotel guests in a data breach it disclosed in 2020.
Marriott discovered the incident two years after Starwood's acquisition and said the information stolen in the incident included guests' names, personal info, addresses, unencrypted passport numbers, and AES-128-encrypted payment information.
News URL
Related news
- ADT confirms data breach after customer info leaked on hacking forum (source)
- CSC ServiceWorks discloses data breach after 2023 cyberattack (source)
- How to Prevent Your First AI Data Breach (source)
- Toyota confirms third-party data breach impacting customers (source)
- National Public Data Breach: Only 134 Million Unique Emails Leaked and Company Acknowledges Incident (source)
- CannonDesign confirms Avos Locker ransomware data breach (source)
- Patelco notifies 726,000 customers of ransomware data breach (source)
- Nearly 1/3 of Companies Suffered a SaaS Data Breach in Last Year (source)
- Park’N Fly notifies 1 million customers of data breach (source)
- GDPR Data Breach Notification Letter (Free Download) (source)