Marriott has been hit with the second largest privacy fine in British history. The fine, for violating the EU’s General Data Protection Regulation, centers on a massive data breach involving the Starwood guest reservation system. The data breach began with an attack against Starwood Hotels and Resorts Worldwide in July 2014. In 2016, Marriott acquired Starwood, but it failed to spot the breach until September 2018. Marriott estimates that the breach exposed personal information for approximately 339 million customers worldwide, as there may have been multiple records for individual customers.”]
Source: https://www.bankinfosecurity.com/marriott-hit-24-million-gdpr-privacy-fine-over-breach-a-15288