Slashdot Mirror
Marriott Faces Multiple Class-Action Lawsuits Over Hotel Reservation Data Breach (vox.com)
An anonymous reader quotes a report from Vox: More than 150 people who previously stayed in Marriott properties are suing the hotel chain in a federal class-action lawsuit, claiming that Marriott didn't do enough to protect them from a data breach that exposed more than 300 million guests' personal information, including names, credit card information, and passport numbers. The suit, which was filed Maryland federal district court on January 9, claims that Marriott did not adequately protect guest information before the breach and, once the breach had been discovered, "failed to provide timely, accurate, and adequate notice" to guests whose information may have been obtained by hackers.
According to the suit, Marriott's purchase of the Starwood properties [in 2016] is part of the problem. "This breach had been going on since 2014. In conducting due diligence to acquire Starwood, Marriott should have gone through and done an accounting of the cybersecurity of Starwood," Amy Keller, an attorney at DiCello Levitt & Casey who is representing the Marriott guests, told Vox. "In so doing, it should have caught -- at the very least -- that there was some suspicious activity concerning the database where a lot of consumer information was contained." Instead, Keller said, the breach continued for an additional two years after the acquisition, until Marriott caught it in September 2018. And even then, the suit claims, the company waited until November to tell guests about the breach.
According to the suit, Marriott's purchase of the Starwood properties [in 2016] is part of the problem. "This breach had been going on since 2014. In conducting due diligence to acquire Starwood, Marriott should have gone through and done an accounting of the cybersecurity of Starwood," Amy Keller, an attorney at DiCello Levitt & Casey who is representing the Marriott guests, told Vox. "In so doing, it should have caught -- at the very least -- that there was some suspicious activity concerning the database where a lot of consumer information was contained." Instead, Keller said, the breach continued for an additional two years after the acquisition, until Marriott caught it in September 2018. And even then, the suit claims, the company waited until November to tell guests about the breach.
A few 100k! Call me a Republican. I must be stupid.
Who got caught cheating on their wives and need to reclaim their divorce settlements.
Your personal and financial information is like a secret... if more folks than you know the details, it's no longer safe.
Being as careful as you can won't hurt you. Have your bank replace your credit and debit cards regularly. Have a card just for hotel & auto reservations, meals, and high risk/low reward expenses like internet pron.
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
It sounds like the hackers should be running the show.
I think everyone is well aware that twitler is playing tic tac toe with himself.
Every time twitler gets a helpful suggestion on how to do better twitler pits his fingers in his ears and screams.
Eventually twitler will learn or be irrelevant
I'm hoping this will change things, but I'm prepared for another slap on the wrist.
Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
Incorrect treatment of this topic. I imagine you are well aware of the effects of the shutdown - people stop buying stuff. If only your pea brain could understand.
Often people get upset with lawsuits. And in some cases, e.g. patents and copyright, there might be some grounds for that. But in point of fact Class actions, which reward lawyers in small numbers and give token payments to masses are just part of our process. They are a form of regulation. It's a bit of a blunt axe. But it's the fire alarm when regulatory agencies don't exist or won't act.
Eventually these either reach an equilibrium where companies increase their responsiblily in areas they felt free to ignore before, or they actually seek protection by asking for regulation. Sometimes congress gets in the act and at that point companies usually propose a an industry code of conduct that is voluntary but advertisable as a way to head off congress.
So tort law isn't exactly about making people whole. It's about shutting down shitty practices that put people at risk.
it's especially important for the case you seem to scoff at. Namely, it's true that staying at a marriot and handing over my info is within my control. But not really. I have to travel and I'm going to to fork this over to ten different companies and their "partners" before I even have my tickets booked. They know I have no alternatives. And if I do have alternatives then it's too much of a personal transactional effort to gather the information to know those alternatives. I can't distinguish between one company and another in regards to data protection standards.
thus these parasitic companies like "life lock" and such that companies like marriot buy "credit monitoring" for the injured are just there to be painful not to really protect me. the protection comes when the companies themselves start safeguarding the data to avoid the pain
Some drink at the fountain of knowledge. Others just gargle.
Another class action lawsuit in which the lawyers will split the bulk of the award and participants will each get a $10 credit on their next stay with Marriott.
LOL. You still can't sleep at night crying over Hillary losing the election.
Why would a hotel have those?
Or that other thing about the website if it wasnâ(TM)t obvious
One day I would like to hear about the outcome of a lawsuit. It's worth remembering that anyone can sue about anything. In the media we typically only hear about people doing some suing, but quite often not if they actually have been even partially successful and nearly always we don't hear about the outcome.
Can we all sue Caesars Entertainment for the harassment, room invasions, illegal computer tampering, and thefts at DEFCON last year?