Marriott settles for a piddly $52M after series of breaches affecting millions

Marriott agreed to pay $52 million and implement comprehensive information-security reforms after a series of network intrusions from 2014–2020 that exposed data for more than 344 million people—ranging from payment card details to millions of unencrypted passport numbers—and the settlements with state attorneys general and the FTC require stronger controls (MFA, network segmentation, encryption), consumer data-deletion options, periodic third-party security assessments, and remediation for compromised loyalty accounts.