Massive Marriott Breach Underscores Risk of overlooking Data Liability

Marriott disclosed that a breach of its Starwood guest reservation database exposed data on approximately 500 million guests — attackers may have had access for up to four years and the stolen information includes names, contact details, passport numbers, SPG account data, travel/reservation details, and in some cases encrypted payment card data; the report highlights failures in M&A cybersecurity due diligence and potential GDPR-related regulatory and financial consequences.