The Marriott International hotel chain suffered a second data breach, exposing the personal data of 5.2 million customers.
The breach, which began in mid-January 2020 and was discovered in late February 2020, revealed contact information, including names, addresses, dates of birth, gender, email addresses and phone numbers. The employer’s name, gender, residence preferences and loyalty account numbers were also released.
Marriott also said that it currently does not believe that passports, payment details or passwords have been exposed in the data breach.
It seems that the login credentials of two employees were stolen, possibly during a social engineering attack.
Tags: data breach, Marriott, Security