10/09/2024 | Press release | Distributed by Public on 10/09/2024 10:43
DES MOINES-Iowa Attorney General Brenna Bird today announced that a bipartisan coalition of 50 attorneys general has reached a settlement with Marriott International, resolving a years-long investigation into a data breach of its guest reservation database. The Federal Trade Commission reached a separate settlement with Marriott.
Marriott has agreed to strengthen its data security practices, offering its guests new protections, and paying a total of $52 million to the States. Iowa will receive $594,105 from the settlement. For years, intruders had undetected access to Marriott's database that exposed 131.5 million guest records. These hacked records included contact information, gender, dates of birth, preferred guest information, reservation information, and hotel stay preferences, as well as some passport numbers and payment card information.
"No Iowans should have to fear that when they take a family vacation, their data will be exploited by hackers," said Attorney General Bird. "This settlement holds Marriott accountable for exposing more than 131 million guest records, containing Americans' personal data, and requires safeguards to ensure all future guests are protected."
Fifty attorneys general launched an investigation into the breach. This settlement resolves the case made by attorneys general that Marriott violated state consumer protection laws, personal- information protection laws, and breach-notification laws by failing to implement proper security measures.
Marriott has agreed to the following measures to strengthen its cybersecurity practices:
Iowa joined the Connecticut, District of Columbia, Illinois, Louisiana, Maryland, Massachusetts, North Carolina, Oregon, and Texas-led multistate investigation. They were joined by Alabama, Alaska, Arizona, Arkansas, Colorado, Delaware, Florida, Georgia, Hawaii, Idaho, Indiana, Kansas, Kentucky, Maine, Michigan, Minnesota, Mississippi, Missouri, Montana, Nebraska, Nevada, New Hampshire, New Jersey, New Mexico, North Dakota, New York, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Utah, Vermont, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.
Read the full settlement here.
###
For More Information:
Alyssa Brouillet | Communications Director
515-823-9112