The UK Information Commissioners Office fined US hotels group Marriott over the 2018 data breach that affected millions of customers worldwide. The fine is less than initially planned because the watchdog had taken into account Marriott’s efforts to mitigate the effects of the incident and the economic impact of Covid-19 on their business before setting a final penalty According to the British watchdog, Marriott failed to perform sufficient due diligence when it bought Starwood Hotels & Resorts Worldwide in 2016 and did not implement necessary measures to secure its systems.”]
Source: https://securityaffairs.co/wordpress/110297/data-breach/uk-ico-fines-marriott.html