Marriott faces $123 million fine in UK for data breach
BETHESDA, MD. >> Marriott says it will fight a $123 million U.K. government fine related to its massive data breach.
Marriott has the right to respond to the proposed fine before a final determination is made by the U.K.’s Information Commissioner’s Office. The agency says the breach violated the European Union’s data protection regulations.
Marriott announced last November that data from as many as 500 million guests at its Starwood hotels may have been compromised by unauthorized access
dating to 2014.
In January, the Bethesda, Maryland, company revised that figure to 323 million guests, and said around 25 million passport numbers may also have been compromised. Marriott has alerted affected guests.
In a statement Tuesday, the Information Commissioner’s Office said the breach affected 30 million European residents, including 7 million in the U.K. The agency found Marriott failed to perform due diligence when it bought Starwood in 2016. It also said Marriott should have done more to secure its systems.
The commissioner’s office noted Marriott has made improvements to its system after the breach was discovered.
Marriott President and CEO Arne Sorenson said the company has assisted the commissioner’s office with its investigation. He said the breach was the result of a criminal attack.
“We are disappointed with this notice of intent from the ICO, which we will contest,” Sorenson said in a statement.
This is the second large fine announced by the Information Commissioner’s Office this week. On Monday, the agency proposed a $229 million fine against British Airways over a data breach that affected 500,000 customers. If that fine holds, it will be the largest levied yet under new, tougher European Union data protection regulations.
While there is more funding available for at-home care than previously, it still is severely limited, especially for those with middle income.