LONDON • Marriott International, the world's largest hotel operator, is facing a London class action lawsuit brought by millions of former hotel guests demanding compensation after their personal data was hacked in one of the largest data breaches in history.
Mr Martin Bryant, founder of technology and media consultancy Big Revolution, is leading the claim for English-and Welsh-domiciled guests after more than 300 million customer records from Marriott's global database, potentially including passport and credit card details, were hacked between 2014 and 2018.
"I hope this case will raise awareness of the value of our personal data, result in fair compensation... and also serve notice to other data owners that they must hold our data responsibly," he said in a statement.
The lawsuit, which seeks unspecified damages for loss of control of personal data, automatically includes guests who made a reservation at any of the former Starwood brand hotels - including Sheraton Hotels & Resorts and St Regis hotels - before Sept 10, 2018.
Mr Bryant is represented by law firm Hausfeld, and the case is funded by Harbour Litigation.
Around seven million United Kingdom guest records were involved, according to the Information Commissioner's Office, which last year proposed a £99.2 million (S$178.9 million) fine over the breach.
A London-based spokesman for Marriott was not immediately available for comment.
Marriott announced in 2018 that hackers had accessed its Starwood hotels reservation database.
It notified the Federal Bureau of Investigation.
"We fell short of what our guests deserve," chief executive Arne Sorenson said at the time.
Attorneys filed a lawsuit in a Maryland federal court within hours of the disclosure. Others followed suit in the United States and Canada.
The London class action has been filed in the High Court after a landmark Court of Appeal decision last October that a collective action could be served against Internet giant Google over alleged unlawful tracking of iPhone users in 2011 and 2012 through third-party cookies.
Google is appealing.
REUTERS
