Marriott Data Breach Timeline: Four Years of Undetected Access

The four-year dwell time highlights the importance of cybersecurity due diligence in mergers and acquisitions. Marriott inherited not just the hotel chain but also the compromised IT infrastructure.

The breach at Marriott exposed 500 million records through persistent unauthorized access to starwood reservation systems. 383 million unique guest records from Starwood reservations The incident highlights the ongoing challenges organizations face in protecting sensitive user data against increasingly sophisticated attack vectors. Security researchers have noted that breaches of this magnitude often result from a combination of technical vulnerabilities and organizational failures in security practices.

Current status: Fine paid; security improvements implemented. Affected users should take immediate steps to protect their accounts, including changing passwords, enabling multi-factor authentication, and monitoring financial accounts for unauthorized activity. Filing a DSAR with Marriott can help you understand what data was exposed and request its deletion.