Financial and Regulatory Resolution
will pay $52 million and enhance its data security practices to settle claims from the and 49 state attorneys general regarding breaches affecting over 300 million customers.
The settlement, which includes no admission of liability from Marriott, mandates the development of a robust information security program and compliance certification to the FTC for 20 years.
Historical Breaches and Immediate Actions
Investigations revealed breaches between 2014 and 2020, with hackers obtaining sensitive customer information, including passport and payment card details.
In response, Marriott has initiated data privacy and security enhancements, offering U.S. customers a method to request deletion of their personal information and implementing multi-factor authentication for loyalty accounts.