Marriott suffers yet another data breach

Date:
Thu, 07 Jul 2022 14:33:02 +0000

Description:
Data on some 400 people stolen, and ransom was demanded.

FULL STORY ======================================================================

Hotel chain Marriott has suffered yet another data breach, with unknown
threat actors managing to steal 20GB worth of data from its servers .

As reported by Engadget , the attackers targeted the companys employees with social engineering techniques, and one of them fell for it. The group managed to access the companys endpoints for less than a day, but this was enough to steal data on up to 400 people, most of whom were allegedly former employees.

"Their information was in archived files that were not detected by the scanning tool we use as part of our proactive security efforts to identify
and remove sensitive data from devices," a Marriott spokesperson told
Engadget . Core network untouched

Apparently, the threat actor targeted the BWI Airport Marriott, in Maryland, USA. It obtained reservation documents for flight crews, as well as corporate credit card numbers for an airline or travel agency. Marriott further said that most of the data was non-sensitive internal business files regarding the operation of the property.

"The incident only involved access to one associates device and documents on
a connected file share server," the spokesperson said. "The incident did not involve access to Marriotts core network, the guest reservation system at the property or the payment processing system at the property." Read more

Millions of Marriott customers exposed in massive data breach

500 million Marriott customers affected by data breach

Best identity management software of 2022

The group also tried to extort Marriott, but the company is said to have refused to pay a ransom fee for the safe return of the data.

Marriott cant seem to catch a break with cyberattacks. In the past decade,
the chain has suffered seven incidents, the biggest happening in November 2018, after purchasing Starwood hotels.

The subsidiary was already compromised when Marriott bought it, but after failing to properly audit its systems, it ended up giving away data on more than 380 million guests. The identities of many customers were at risk, as more than five million unencrypted passport numbers were allegedly stolen, as well.

The company was fined almost $22 million by the UKs Information Commissioners Office (ICO) for the incident. Safeguard your premises with the best
firewalls around

Via Engadget



======================================================================
Link to news story: https://www.techradar.com/news/marriott-has-been-hit-by-yet-another-data-breac h/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)