Data breach settlement with Marriot International puts $800,000-plus into Arkansas

LITTLE ROCK, Ark. – A settlement between Marriot International, Inc. and 50 states over a data breach will result in a $804,965 award to Arkansas.

Attorney General Tim Griffin announced Wednesday that the settlement was regarding a significant multi-year data breach. Griffin joined with 50 other attorneys general in seeking a settlement.

Griffin said that in the settlement with the attorneys general, Marriott has agreed to strengthen its data security practices using a dynamic risk-based approach, provide certain consumer protections, and pay $52 million to states.

Officials explained that Marriott acquired Starwood Hotels and Resorts Worldwide, LLC in 2016 and took control of Starwood’s computer network.  Later, investigators determined the system had been breached from July 2014 until September 2018, exposing guest records, including American unencrypted passport numbers and payment card information.

Griffin said the settlement came at a good time.

“With Cybersecurity Awareness Month in full swing, this settlement is yet another reminder how widespread data breaches are, and how many lives they touch—including the lives of those who travel for business, visit family, or vacation,” the attorney general said. “I remain committed to holding companies accountable for data breaches while encouraging Arkansans to be vigilant and protect their personal information and passwords.”

Officials said that as part of the settlement, Marriot will now offer its customers options for increased data security and protection.

For the latest news, weather, sports, and streaming video, head to KARK.