The UK's data privacy watchdog has fined the Marriott Hotels chain £18.4m for a major data breach that may have affected up to 339 million guests. The Information Commissioner's Office (ICO) said names, contact information, and passport details may all have been compromised in a cyber-attack. The breach included seven million guest records for people in the UK. The ICO said the company failed to put appropriate safeguards in place but acknowledged it had improved. The first part of the cyber-attack happened in 2014, affecting the Starwood Hotels group, which was acquired by Marriott two years later. But until 2018, when the problem was first noticed, the attacker continued to have access to all affected systems, including: - Names - Email addresses - Phone numbers - Passport numbers - Arrival and departure information - VIP status - Loyalty program numbers

The UK's data privacy watchdog has fined the Marriott Hotels chain £18.4m for a major data breach that may have affected up to 339 million guests. The Information Commissioner's Office (ICO) said names, contact information, and passport details may all have been compromised in a cyber-attack. The breach included seven million guest records for people in the UK. The ICO said the company failed to put appropriate safeguards in place but acknowledged it had improved. The first part of the cyber-attack happened in 2014, affecting the Starwood Hotels group, which was acquired by Marriott two years later. But until 2018, when the problem was first noticed, the attacker continued to have access to all affected systems, including: - Names - Email addresses - Phone numbers - Passport numbers - Arrival and departure information - VIP status - Loyalty program numbers

Principles of Information Systems (MindTap Course List)

13th Edition

ISBN:9781305971776

Author:Ralph Stair, George Reynolds

Publisher:Ralph Stair, George Reynolds

Chapter13: Cybercrime And Information System Security

Section: Chapter Questions

Problem 2CTQ1

See similar textbooks

Similar questions

"The Department of Justice (DoJ) suffered a ransomware attack in September 2021 that resultedin its systems being encrypted and going offline, and the exposure of at least 1,200 files".Describe the mitigation strategy that the DoJ can use for controlling risk. In your discussion,outline the three planning approaches that the DoJ can use to mitigate risk.
What's the ideal result for healthcare data/cybersecurity breaches?
The network of an entertainment company was hacked by a hactivist through a backdoor attack that lasted for two (2) minutes. Do you think there was a lack of cybersecurity risk management in the company? Why do you think so? What are the possible preventive measures that the company should have done prior to the attack? What are some possible impacts of the attack to the entertainment company?
The Cybersecurity and Infrastructure Security Agency Act: what are your thoughts on it? Why don't you provide a reference to support your assertion?