Customers of Marriott International, a prominent hotel group, may find that their personal information has been compromised in connection with the guest reservation database managed by Starwood.
Incident Overview
Marriott has announced that an internal investigation revealed that unauthorized access to the Starwood guest reservation database began in 2014, potentially impacting approximately 500 million customers. The company is reaching out to those affected by this data breach.
Recommended Actions
For the latest updates, visit Marriott International’s information page here.
If you made a reservation with Marriott since 2014, we advise contacting your bank or credit card provider if you notice any unusual activity. Additionally, monitor your financial accounts for suspicious transactions.
Currently, there is no indication that Marriott online account details, such as usernames and passwords, have been compromised.
Consider visiting Get Safe Online for information on how to protect your data online. Additionally, services like Have I Been Pwned can inform you if your personal information has been leaked.
Utilizing two-factor authentication for sensitive accounts is recommended, and unique passwords should be created for each account.
Those affected should be cautious of suspicious phone calls or targeted emails. More information on cybersecurity can be found on the NCSC website and through Cyber Aware.
If you suspect that you have fallen victim to online crime, you can report a cyber incident using Action Fraud’s fraud reporting tool anytime or by calling 0300 123 2040. More information is available at www.actionfraud.police.uk.
For additional insights, refer to the NCSC guidance on phishing threats related to data breaches.
Additional Information
Marriott International has established a dedicated call center to address customer inquiries regarding this incident. The organization is also sending out emails to guests whose email addresses are included in the Starwood guest reservation database.
Further details and updates from Marriott International can be found here.
Stay informed about the latest statements from the NCSC here.
Remember, legitimate financial institutions will not ask for personal information via email. Always verify the contact information independently before responding.
Article has been taken from ncsc.gov.uk: https://www.ncsc.gov.uk/guidance/ncsc-advice-marriott-international-customers
