The Marriott/Starwood breach exposed up to 500 million guest records and went undetected for around four years, with attribution pointing to Chinese state intelligence.
Key facts
- Disclosed in 2018, with intrusion dating back around four years.
- Exposed up to 500 million guest records, including passport numbers for some.
- Attributed to Chinese state-linked intelligence (MSS).
- Resulted from a compromise inherited through the Starwood acquisition.
The lesson
Marriott shows the danger of undetected, long-dwell intrusions and unassessed risk in acquisitions. Continuous monitoring shortens attacker dwell time.
How DarkThreatX helps
DarkThreatX monitors the dark web for breached records, leaked credentials and exposed data tied to your organisation, so you can detect exposure early. Run a free dark web scan or explore the platform.
