All Breaches
July 1, 2014 Verified Sensitive Record Travel

Marriott International Data Breach

In November 2018, multinational hospitality giant Marriott International announced a massive data breach involving the guest reservation database of its Starwood hotel brand, which it had acquired in 2016.

383 Million
Affected People
8
Data Types
Critical
Severity
Oct 27, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

8
  • Names
  • Postal addresses
  • Phone numbers
  • Email addresses
  • Passport numbers
  • Loyalty program details
  • Reservation and travel information
  • Payment card information

About This Breach

Ongoing undetected since 2014, the state-sponsored cyber intrusion compromised the personal records of approximately 383 million unique guests. Exposed data included full names, mailing addresses, phone numbers, email addresses, over 5 million unencrypted passport numbers, Starwood Preferred Guest loyalty account information, and travel arrival/departure dates, resulting in an £18.4 million regulatory fine by the UK Information Commissioner's Office (ICO).

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information