• Marriott data breach is enormous

    Catalin Cimpanu, now on ZDNet, has the news that

    Hours after announcing a data breach on Friday, two Oregon men sued international hotel chain Marriott for exposing their data. Their lawsuit was followed hours later by another one filed in the state of Maryland.

    Both lawsuits are seeking class-action status. While plaintiffs in the Maryland lawsuit didn’t specify the amount of damages they were seeking from Marriott, the plaintiffs in the Oregon lawsuit want $12.5 billion in costs and losses.

    That’s a paltry $25 for each record that’s been purloined. 500 million hotel guests, starting in 2014. “name, mailing address, phone number, email address, passport number, Starwood Preferred Guest (“SPG”) account information, date of birth, gender, arrival and departure information, reservation date, and communication preferences.”

    Quite a haul.

    Check your credit cards, folks. And push for a US-based GDPR.

    UPDATE: If you haven’t seen Brian Krebs’s take on the big breach, look here and here.

    I got quite a chuckle when I checked my old messages and came across this one from May:

    Marriott Rewards

    As we continue to integrate Starwood Hotels with Marriott®, we wanted to let you know that we have updated our Global Privacy policy.

    What’s Changed?

    Our updated Global Privacy Statement now reflects the combination of Marriott International, Inc. and StarwoodHotels & Resorts Worldwide, LLC (formerly known as Starwood Hotels & Resorts Worldwide, Inc.) and their affiliates.
    Our updated Global Privacy Statement makes it easier to understand the types of data we collect, how we collect data, with whom we share and how we use it (e.g., to offer personalized stay and travel experiences based on your personal preferences).
    Our new Privacy Center provides helpful information about how you can express your preferences, from what and how much you share with us, to when and how you hear from us.
    We’re making these updates as new data protection regulations come into effect in the European Union, and we are confident they will make it easier to understand the choices available to you.