Skip to main content

Marriott’s Starwood database hacked, 500 million may be affected

Marriott

Marriott International said on Friday that hackers accessed about 500 million records in its Starwood Hotels reservation system in an attack that began four years ago, exposing personal data of customers including some payment card numbers.

Shares fell 5 percent after disclosure of the hack, one of the largest in history, which prompted regulators in Britain and at least three US states to announce plans to look into the attack.

The hack began in 2014, before Marriott offered to buy Starwood for $12.2 billion in November 2015, acquiring brands including Sheraton, Ritz Carlton and Westin to create the world’s largest hotel operator. The company closed the Starwood deal in September 2016.

Passport details, phone numbers and email addresses of some 327 million Marriott customers were exposed, according to the company. Credit card data may have been taken for other customers, it said.

“What makes this serious is the number of people involved, the intimacy of the data that was taken and the long delay between the breach and discovery,” said Mark Rasch, a former US federal cyber crimes prosecutor.

Read More: US accuses China of violating bilateral anti-hacking agreement

Customers complained to Marriott through its account on Twitter, where Starwood was among the top trending US topics. Some criticized the company, using terms including “duped,” “angry” and “merger disaster” to describe the incident.

Marriott said it learned of the breach on Sept. 8 when an internal security tool sent an alert about suspicious activity.

“We fell short of what our guests deserve,” Marriott Chief Executive Arne Sorenson said.

The offices of attorneys general in Connecticut, Illinois and New York said they would investigate the attack, as did the UK’s Information Commissioner’s Office. A representative with the US Federal Trade Commission declined comment.

Marriott said it would inform affected guests about the breach starting Friday, and that it had reported it to law enforcement and regulatory authorities.

The breach appeared to be the second-largest on record after one at Yahoo in 2013 that exposed all of its 3 billion user accounts. That breach cost $47 million in litigation expenses and prompted Verizon Communications to cut $350 million off the price it paid when it acquired most of Yahoo.

Marriott said it was too early to estimate the financial impact of the breach and that it would not affect its long-term financial health. The hotel chain said it was working with its insurance carriers to assess coverage.

Baird Equity Research said in a note to clients that breach-related costs, including legal fees, technical expenses and increased security, could force Marriott to delay the rollout of a new customer loyalty program planned for early 2019.

“Investor sentiment toward Marriott could remain somewhat negative in the near term until this security incident is fully resolved and its true financial impact is learned,” Baird said.

The Hyatt breach highlights the need for companies to pay close attention on cyber security when making acquisitions.

“Understanding the cybersecurity posture of an investment is critical to assessing the value of the investment and considering reputational, financial, and legal harm that could befall the company,” said Jake Olcott, a vice president with cybersecurity firm BitSight.

Starwood brands include W Hotels, St. Regis, Sheraton Hotels & Resorts, and Westin Hotels & Resorts.

The post Marriott’s Starwood database hacked, 500 million may be affected appeared first on ARYNEWS.

Labels:

Comments

Post a Comment

Popular posts from this blog

Accountability court hears assets case against Ishaq Dar

ISLAMABAD: An accountability court in Islamabad on Wednesday resumed the hearing of a reference filed against former finance minister Ishaq Dar by the National Accountability Bureau (NAB) for allegedly accumulating assets beyond his known sources of income.  Judge Muhammad Bashir is recording the statement of a prosecution witness, Ishtiaq Ahmed. At the previous hearing, the accountability judge had reserved his verdict on an application filed by two co-accused seeking acquittal in the case. Naeem Mehmood and Mansoor Rizvi, who are directors of Dar’s companies, had filed the application requesting the judge to exonerate them from all charges for want of evidence. Qazi Misbah, the counsel for the two co-accused, contended the prosecution has failed to provide compelling evidence to prove the allegations leveled against his clients. The third co-accused President National Bank of Pakistan (NBP), Saeed Ahmed, had already filed an application before the court for his acquittal wh...
Post a Comment
Read more

SFA raids several restaurants in Karachi, imposes fine

KARACHI: The Sindh Food Authority (SFA) on Friday raided several restaurants in city’s North Nazimabad area over unhygienic conditions, ARY News reported. According to the SFA, one of the restaurants was found utilizing the used oil multiple times. The items were also not properly frozen while crockery for serving the food was also not clean. The team imposed a fine of Rs 50,000 on the restaurant. The SFA team found hygiene standards were sheerly compromised in food making to the core. The food inspectors said they had previously served notices to the food outlets, but the restaurant owners apparently turned a blind eye to it. Raids were also conducted in district Malir and Gulshan-e-Hadeed. Sanitary conditions and lack of fumigation facilities were found at the restaurants in some of the Malir outlets. The SFA team also raided a bakery ‘Friend Bakers’ and imposed a fine of Rs 20,000 over poor hygiene.  Similarly another roadside restaurant was fined Rs 20,000 for neglecting he...
Post a Comment
Read more

Trump says US generals feel Beirut blast was likely an ‘attack’

WASHINGTON: President Donald Trump on Tuesday cast a massive explosion in Beirut as a possible attack, despite statements by Lebanese leaders that it was likely caused by highly explosive material that had been stored at warehouses in the capital for years. “The United States stands ready to assist Lebanon,” Trump said at a White House briefing of Tuesday’s explosion, which killed at least 78 people and injured thousands. “It looks like a terrible attack.” When asked later about his depiction of the explosion, Trump said that he had met with some U.S. generals who feel the blast was not “some kind of a manufacturing explosion type of event.” He told reporters that according to these unnamed generals “they seem to think it was an attack. It was a bomb of some kind.” The Pentagon referred questions to the White House. Two U.S. officials, speaking on the condition of anonymity, said it was unclear where Trump was receiving his information but that initial information did not appear...
Post a Comment
Read more