Skift Take
Not what executives at Marriott wanted to see right now, as the hotel giant faces an uphill battle to recovery from the pandemic. A lot of Zooming today with the lawyers.
Marriott International, a leading hotel operator, is facing a London class action brought by millions of former guests demanding compensation after their personal records were hacked in one of the largest data breaches in history.
Martin Bryant, founder of technology and media consultancy Big Revolution, is leading the claim for English and Welsh-domiciled guests after more than 300 million customer records from Marriott’s global database, potentially including passport and credit card details, were hacked between 2014 and 2018.
“I hope this case will raise awareness of the value of our personal data, result in fair compensation … and also serve notice to other data owners that they must hold our data responsibly,” he said in a statement.
The lawsuit, which seeks unspecified damages for loss of control of personal data, automatically includes guests who made a reservation for one of the former Starwood brand hotels – including Sheraton Hotels & Resorts and St. Regis hotels – before Sept. 10, 2018.
Bryant is represented by law firm Hausfeld and the case is funded by Harbour Litigation.
A London-based spokeswoman for Marriott said: “We don’t have a comment to make at this time.”
Around seven million British guest records were compromised by the hack, according to the UK Information Commissioner’s Office (ICO), which last year proposed to fine Marriott 99.2 million pounds.
Marriott announced in 2018 that hackers had accessed its Starwood hotels reservation database and notified the FBI. Attorneys filed a lawsuit in a Maryland federal court within hours and others followed suit in the U.S. and Canada.
The London class action has been filed in the High Court after a landmark Court of Appeal decision last October that allowed a similar, opt-out lawsuit to be served against Internet giant Google over alleged unlawful tracking of iPhone users in 2011 and 2012 through third party cookies.
U.S.-style “opt-out” class actions bind a defined group automatically into legal action unless individuals opt out, saving on hefty advertising costs.
Google is appealing.
(Reporting by Kirstin Ridley; Editing by Elaine Hardcastle, Kirsten Donovan)
This article was written by Kirstin Ridley from Reuters and was legally licensed through the Industry Dive publisher network. Please direct all licensing questions to [email protected].
Have a confidential tip for Skift? Get in touch
Tags: data breach, marriott
Photo credit: Executives at Marriott's corporate headquarters could not have been too happy with the news of a class action lawsuit being filed in the UK. Skift