Minnesota will receive more than $800,000 as part of a nationwide settlement with Marriott International over a data breach.
Minnesota Attorney General Keith Ellison recently announced that he and 49 other attorneys general had reached a $52 million settlement with the hospitality company.
The settlement stems from Marriott’s acquisition of Starwood in 2016. According to Ellison’s office, intruders in the Starwood computer network went undetected from 2014 to 2018. As a result, 131.5 million records of customers in the U.S. were compromised.
The records included contact information, gender, dates of birth, legacy Starwood Preferred Guest information, reservation information and hotel stay preferences. Limited records containing unencrypted passport numbers and unexpired payment information were also compromised.
Minnesota will receive a total of $814,847 from the settlement.
Under the settlement, Marriott must also implement a new comprehensive information security program and limit what customer data is collected and stored. The company must also increase vendor and franchisee oversight and allow for a third-party assessment of its information security program every two years for 20 years.