In a cyber incident previously notified to the ICO on November 18, Marriott International unintentionally exposed the personal data of over 330 million guest records globally, out of which 30 million were residents of 31 countries in the European Economic Area. About seven million were residents of the UK. This cyber vulnerability is related to the data breach of the Starwood hotels group in 2014. Marriott bought Starwood in 2016, yet the data breach was only identified in 2018, when Marriott notified the ICO about it. During the investigation, the ICO found that Marriott had employed inadequate security check-ups on its systems after acquiring Starwood. Recently, the ICO decided to fine Marriott with £18.4 million (about EUR 20.4 million). When calculating this fine, the ICO took into consideration the company’s absence of prior violations of GDPR regulations, as well as the company’s full cooperation during the investigation, and personal initiative to notify the affected individuals regarding the data breach.
in a cyber incident previously notified to the ico on november marriott international unintentionally exposed the personal data of over million guest records globally out of which million were residents of countries in the european economic area about seven million were residents of the uk this cyber vulnerability is related to the data breach of the starwood hotels group in marriott bought starwood in yet the data breach was only identified in when marriott notified the ico about it during the investigation the ico found that marriott had employed inadequate security checkups on its systems after acquiring starwood recently the ico decided to  marriott with £ million about  million when calculating this  the ico took into consideration the company’s absence of prior s of  regulations as well as the company’s full cooperation during the investigation and personal initiative to notify the affected individuals regarding the data breach
  cyber incident previously notify   ico  november marriott international unintentionally expose  personal data   million guest record globally    million  residents  countries   european economic area  seven million  residents   uk  cyber vulnerability  relate   data breach   starwood hotels group  marriott buy starwood  yet  data breach   identify   marriott notify  ico     investigation  ico find  marriott  employ inadequate security checkups   systems  acquire starwood recently  ico decide   marriott  £ million   million  calculate    ico take  consideration  company’ absence  prior    regulations  well   company’ full cooperation   investigation  personal initiative  notify  affect individuals regard  data breach