After Buying Starwood, Marriott didn’t spot long-running Breach for 2 more years. Breach began with Starwood’s “guest reservation system” in 2014, but went undetected until 2018. The case stands as “a salutary lesson of the need to keep data safe,” says Jonathan Armstrong, a partner at London-based law firm Cordery. Once you buy it, you own it, says an IT expert who’s previously worked as a CISO and CTO.”]
Source: https://www.cuinfosecurity.com/blogs/marriott-breach-takeaway-ma-cybersecurity-challenge-p-2964