Data from 5.2M Marriott Loyalty Program Members Hit by Breach

Marriott International has notified some 5.2 million guests that their personal information could have been accessed in the breach of an internal application used to help provide guest services. According to the company, the breach was active from mid-January until the end of February of this year.

The information involved in the leak is part of the data kept on guests as part of Marriott's Bonvoy loyalty program. The affected information includes contact details (such as name, mailing address, email address, and phone number), loyalty account information (including account number and points balance, but not passwords), additional personal details (such as company, gender, and birthday day and month), partnerships and affiliations (including linked airline loyalty programs and numbers), and preferences (for example, stay/room preferences and language preference). Marriott noted that no account passwords or PINs, payment card information, passport information, national IDs, or driver's license numbers were part of the breached data.

In the breach notification, Marriott said that the unauthorized access came through the credentials of two employees at a franchise location. The company is offering a year of identity monitoring to all affected guests.

For more, read here.

Check out The Edge, Dark Reading's new section for features, threat data, and in-depth perspectives. Today's featured story: "Untangling Third-Party Risk (and Fourth, and Fifth...)."