Following an expansive investigation by the Texas Attorney General's Office into a significant breach of customer data, Marriott International has agreed to a $3.5 million settlement, Attorney General Ken Paxton announced yesterday. The compromise comes after the hospitality giant's reservation system was compromised, exposing personal details of approximately 131 million guests across the United States.
This breach, which made headlines for its scale and scope, included sensitive information such as contact details, dates of birth, and even unencrypted passport numbers along with payment card information. In an effort to address the fallout and prevent future incidents, part of the settlement requires Marriott to overhaul their data security practices. These new practices will include zero-trust principles, regular top-level security reports, and enhanced employee training on handling sensitive data.
The settlement's terms are intended to bolster consumer protection against cyber threats which are becoming all too common in the digital age. Paxton emphasized, in words obtained by the Texas Attorney General's news release, the necessity of robust data security programs saying, "Texas law is clear that companies in possession of Texans' personal information have a duty to safeguard that data."
Marriott not only has to comply with strict security requirements but is also paying $52 million to the 50 states involved in the settlement, with Texas receiving $3.5 million. Paxton has vowed to maintain this level of diligence, stating to the Texas Attorney General Office, "I will continue to fight for our citizens’ privacy and data security," reassuring customers that their information should be better protected by businesses in the future.
