Was Your Passport Info Leaked?
(A Case Study On The 2018 Marriott Data-Breach)
In 2018 Marriott discovered an alleged Chinese state sponsored attack on the Starwood's guest reservation database. Attackers utilized a pre-acquisition foothold to query a count of rows which triggered an alert. 23.75 Million passport numbers were stolen with 5.25 Million being unencrypted, stored in the clear.
Although the breach had been on going for over 4 years Marriott attempted a timely resolution. Once discovered Marriott contained the incident, alerted the potentially affected consumers and reported the incident to the proper authorities (FBI & ICO).
For a more in depth analysis please visit the following links.
Report: https://docs.google.com/document/d/17ToTphRcmyoztqSP1kx1r_NjawFVj6xauuZfSMPwag8/edit?usp=sharing
Slideshow/Video:
