Marriott International Inc

£18.4M($23.6M USD)final

Date Issued

2020-10-30

Authority

UK ICO

Country

United Kingdom

Violation Type

other

Currency

GBP

Violation Summary

Marriott International Inc fined £18.4million for failing to keep millions of customers’ personal data secure. Marriott estimates that 339 million guest records worldwide were affected following a cyber-attack in 2014 on Starwood Hotels and Resorts Worldwide Inc. The attack, from an unknown source, remained undetected until September 2018, by which time the company had been acquired by Marriott.