Marriott International Inc.

Marriott International Inc. faced a major data breach involving its Starwood-branded hotels, exposing the personal information of up to **383 million guests**. The breach, which led to consolidated litigation, included sensitive customer data such as names, addresses, passport numbers, and payment details. The city of Chicago filed claims against Marriott, but the case was dismissed with prejudice after a settlement was reached. The incident underscores the severe consequences of large-scale data leaks, particularly in the hospitality sector, where trust and data security are critical. The breach not only risked financial fraud and identity theft for affected guests but also damaged Marriott’s reputation, leading to legal repercussions and regulatory scrutiny. The scale of the exposure—affecting hundreds of millions—highlights the systemic vulnerabilities in handling customer data across global operations.

Source: https://news.bloomberglaw.com/ip-law/marriott-escapes-chicagos-claims-in-data-breach-litigation

TPRM report: https://www.rankiteo.com/company/marriott-international

"id": "mar0802208101125",
"linkid": "marriott-international",
"type": "Breach",
"date": "10/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Up to 383 million guests '
                                              '(Starwood-branded hotels)',
                        'industry': 'Hospitality',
                        'location': 'Global (Headquartered in Bethesda, '
                                    'Maryland, USA)',
                        'name': 'Marriott International Inc.',
                        'type': 'Corporation'},
                       {'industry': 'Public Administration',
                        'location': 'Chicago, Illinois, USA',
                        'name': 'City of Chicago',
                        'type': 'Government Entity'}],
 'data_breach': {'number_of_records_exposed': 'Up to 383 million',
                 'personally_identifiable_information': ['Yes (guest personal '
                                                         'information)'],
                 'sensitivity_of_data': ['High (personal information of '
                                         'guests)'],
                 'type_of_data_compromised': ['Personal information']},
 'description': 'Marriott International Inc. settled the city of Chicago’s '
                'claims in consolidated litigation over a data breach that '
                'compromised the personal information of as many as 383 '
                'million guests at its Starwood-branded hotels. Judge John P. '
                'Bailey of the US District Court for the Northern District of '
                'West Virginia issued an order dismissing the city’s claims '
                'with prejudice on Thursday, one day after the city filed a '
                'stipulation of dismissal with the court.',
 'impact': {'data_compromised': ['Personal information of up to 383 million '
                                 'guests'],
            'identity_theft_risk': ['Personal information of guests'],
            'legal_liabilities': ['Consolidated litigation with the city of '
                                  'Chicago (settled)']},
 'investigation_status': 'Settled (claims dismissed with prejudice)',
 'references': [{'source': 'US District Court for the Northern District of '
                           'West Virginia (Judge John P. Bailey)'}],
 'regulatory_compliance': {'legal_actions': ['Litigation with the city of '
                                             'Chicago (settled)']},
 'title': 'Marriott International Data Breach Settlement with the City of '
          'Chicago',
 'type': 'Data Breach'}