Chinese Foreign Ministry spokesman Geng Shuang on Thursday said Beijing opposed "gratuitous accusations" when asked about allegations that clues in a massive breach at hotel group Marriott International Inc implicated China.

Hackers behind it left clues suggesting they were working for a Chinese government intelligence-gathering operation, according to sources familiar with the matter.

Marriott said last week that a hack that began four years ago had exposed the records of up to 500 million customers in its Starwood hotels reservation system.&nbsp;

Private investigators looking into the breach have found hacking tools, techniques and procedures previously used in attacks attributed to Chinese hackers said three sources who were not authorized to discuss the company's private probe into the attack.

If investigators confirm that China was behind the attack, that could complicate already tense relations between Washington and Beijing, amid an ongoing tariff dispute and US accusations of Chinese espionage and the theft of trade secrets.

Chinese Foreign Ministry spokesman Geng Shuang on Thursday said Beijing opposed "gratuitous accusations" when asked about allegations that clues in a massive breach at hotel group Marriott International Inc implicated China.

Chinese Foreign Ministry spokesman Geng Shuang on Thursday said Beijing opposed "gratuitous accusations" when asked about allegations that clues in a massive breach at hotel group Marriott International Inc implicated China. Hackers behind it left clues suggesting they were working for a Chinese government intelligence-gathering operation, according to sources familiar with the matter. Marriott said last week that a hack that began four years ago had exposed the records of up to 500 million customers in its Starwood hotels reservation system. Private investigators looking into the breach have found hacking tools, techniques and procedures previously used in attacks attributed to Chinese hackers said three sources who were not authorized to discuss the company's private probe into the attack. If investigators confirm that China was behind the attack, that could complicate already tense relations between Washington and Beijing, amid an ongoing tariff dispute and US accusations of Chinese espionage and the theft of trade secrets.

China denies role in Marriott hacking case

Marriott International said on Friday that hackers accessed up to 500 million customer records in its Starwood Hotels reservation system in an attack that began four years ago, exposing data including passport numbers and payment cards.

Shares were down 5.7 per cent in late afternoon trade on news of the hack, one of the largest in history, which prompted regulators in Britain and at least five US states to launch investigations.

The Federal Bureau of Investigation said it was looking into the attack on Starwood, whose brands include Sheraton, St Regis, W and Westin hotels. It advised affected customers to check for identity fraud and report it to the bureau's Internet Crime Complaint Center.

The hack began in 2014, a year before Marriott offered to buy Starwood to create the world's largest hotel operator. The $13.6 billion deal closed in September 2016.

Some 327 million customer records containing information including passport details, birthdates, addresses, phone numbers and email addresses were exposed, according to the company.

The hackers also accessed payment card data for an undisclosed number of customers, the company said.

"What makes this serious is the number of people involved, the intimacy of the data that was taken and the long delay between the breach and discovery," said Mark Rasch, a former US federal cybercrimes prosecutor.

Some customers complained to Marriott on Twitter, where Starwood was among the top trending US topics. They used terms including "duped," "angry" and "merger disaster" to express frustration over the incident.

Attorneys filed a lawsuit in a Maryland federal court within hours of the disclosure which seeks class-action status for customers whose data was exposed in the breach.

The complaint accuses Marriott of negligence as well as deceptive and unfair trade practices and sought unspecified financial compensation for harm caused by exposure of their data.

The company said on its website that it learned of the breach on Sept. 8 when an internal security tool sent an alert about suspicious activity.

"We fell short of what our guests deserve," Marriott Chief Executive Arne Sorenson said in a statement.

Attorneys general in Connecticut, Illinois, Massachusetts, New York and Pennsylvania said they would investigate the attack, as did the UK's Information Commissioner's Office.

"The public deserves to know how this happened," Massachusetts Attorney General Maura Healey said in a statement.

Company representatives could not be reached to comment on the lawsuit, government investigations or to explain why it had taken so long to uncover and disclose the hack.

Marriott said on its website that it would inform affected guests about the breach starting on Friday and that it had reported it to law enforcement and regulatory authorities.

The breach appeared to be the second-largest on record, based on records compromised, after one at Yahoo in 2013 that exposed all of its 3 billion user accounts. That incident cost $47 million in litigation expenses and prompted Verizon Communications Inc to cut $350 million off the price it paid when it acquired most of Yahoo.

Marriott said it was too early to estimate the financial impact of the breach, though it would not affect its long-term financial health. The hotel chain said it was working with its insurance carriers to assess coverage.

Baird Equity Research said in a note to clients that breach-related costs, including legal fees, technical expenses and increased security, could force Marriott to delay the rollout of a new customer loyalty program planned for early 2019.

"Investor sentiment toward Marriott could remain somewhat negative in the near term until this security incident is fully resolved and its true financial impact is learned," Baird said.

Retailers Target Corp and Home Depot Inc each incurred costs of about $200 million after massive payment-card breaches in 2013 and 2014.

The Hyatt breach highlights the need for companies to pay close attention to cybersecurity when making acquisitions.

"Understanding the cybersecurity posture of an investment is critical to assessing the value of the investment and considering reputational, financial, and legal harm that could befall the company," said Jake Olcott, a vice president with cybersecurity firm BitSight.

Marriott International said on Friday that hackers accessed up to 500 million customer records in its Starwood Hotels reservation system in an attack that began four years ago, exposing data including passport numbers and payment cards.

Marriott International said on Friday that hackers accessed up to 500 million customer records in its Starwood Hotels reservation system in an attack that began four years ago, exposing data including passport numbers and payment cards. Shares were down 5.7 per cent in late afternoon trade on news of the hack, one of the largest in history, which prompted regulators in Britain and at least five US states to launch investigations. The Federal Bureau of Investigation said it was looking into the attack on Starwood, whose brands include Sheraton, St Regis, W and Westin hotels. It advised affected customers to check for identity fraud and report it to the bureau's Internet Crime Complaint Center. The hack began in 2014, a year before Marriott offered to buy Starwood to create the world's largest hotel operator. The $13.6 billion deal closed in September 2016. Some 327 million customer records containing information including passport details, birthdates, addresses, phone numbers and email addresses were exposed, according to the company. The hackers also accessed payment card data for an undisclosed number of customers, the company said. "What makes this serious is the number of people involved, the intimacy of the data that was taken and the long delay between the breach and discovery," said Mark Rasch, a former US federal cybercrimes prosecutor. Some customers complained to Marriott on Twitter, where Starwood was among the top trending US topics. They used terms including "duped," "angry" and "merger disaster" to express frustration over the incident. Attorneys filed a lawsuit in a Maryland federal court within hours of the disclosure which seeks class-action status for customers whose data was exposed in the breach. The complaint accuses Marriott of negligence as well as deceptive and unfair trade practices and sought unspecified financial compensation for harm caused by exposure of their data. The company said on its website that it learned of the breach on Sept. 8 when an internal security tool sent an alert about suspicious activity. "We fell short of what our guests deserve," Marriott Chief Executive Arne Sorenson said in a statement. Attorneys general in Connecticut, Illinois, Massachusetts, New York and Pennsylvania said they would investigate the attack, as did the UK's Information Commissioner's Office. "The public deserves to know how this happened," Massachusetts Attorney General Maura Healey said in a statement. Company representatives could not be reached to comment on the lawsuit, government investigations or to explain why it had taken so long to uncover and disclose the hack. Marriott said on its website that it would inform affected guests about the breach starting on Friday and that it had reported it to law enforcement and regulatory authorities. The breach appeared to be the second-largest on record, based on records compromised, after one at Yahoo in 2013 that exposed all of its 3 billion user accounts. That incident cost $47 million in litigation expenses and prompted Verizon Communications Inc to cut $350 million off the price it paid when it acquired most of Yahoo. Marriott said it was too early to estimate the financial impact of the breach, though it would not affect its long-term financial health. The hotel chain said it was working with its insurance carriers to assess coverage. Baird Equity Research said in a note to clients that breach-related costs, including legal fees, technical expenses and increased security, could force Marriott to delay the rollout of a new customer loyalty program planned for early 2019. "Investor sentiment toward Marriott could remain somewhat negative in the near term until this security incident is fully resolved and its true financial impact is learned," Baird said. Retailers Target Corp and Home Depot Inc each incurred costs of about $200 million after massive payment-card breaches in 2013 and 2014. The Hyatt breach highlights the need for companies to pay close attention to cybersecurity when making acquisitions. "Understanding the cybersecurity posture of an investment is critical to assessing the value of the investment and considering reputational, financial, and legal harm that could befall the company," said Jake Olcott, a vice president with cybersecurity firm BitSight.

Marriott's Starwood hack hits up to 500 million customers

marriott-international

Marriott International, News on Marriott International, stories on Marriott International, articles on Marriott International, Marriott International stories at Wion, Marriott International news, Marriott International latest news

marriott international

China denies role in Marriott hacking case

Marriott's Starwood hack hits up to 500 million customers