More than 5 million passports exposed in massive Marriott hack

/ AP

Analyzing Marriott's massive data breach

Fewer Marriott guest records than previously feared were compromised in a massive data breach last fall, but the largest hotel chain in the world confirmed Friday that 5.25 million unencrypted passport numbers were accessed.

The compromise of those passport numbers has raised alarms among security experts because of their value to state intelligence agencies.

The FBI is leading the investigation of the data theft and investigators suspect the hackers were working on behalf of the Chinese Ministry of State Security, the rough equivalent of the CIA.

The hackers accessed about 20.3 million encrypted passport numbers. There is no evidence that they were able to use the master encryption key required to gain access to that data.

Why state actors might steal passport data

Unencrypted passport numbers are valuable to state intelligence agencies because they can be used to compile detailed dossiers on people and their international movements.

In the case of China, it would allow that country's security ministry to add to databases of aggregated information on valued individuals. Those data points include information on people's health, finances and travel.

"You can identify things in their past that maybe they don't want known, points of weakness, blackmail, that type of thing," said Priscilla Moriuchi, an analyst with Recorded Future who specialized in East Asia at the U.S. National Security Agency where she spent 12 years. She left the agency in 2017.

Chinese hackers reportedly linked to Marriott data breach

When the Bethesda, Maryland, hotel chain initially disclosed the breach in November, the company said that hackers compiled stolen data undetected for four years, including credit card and passport numbers, birthdates, phone numbers and hotel arrival and departure dates.

The affected hotel brands were operated by Starwood before it was acquired by Marriott in 2016. They include W Hotels, St. Regis, Sheraton, Westin, Element, Aloft, The Luxury Collection, Le Méridien and Four Points. Starwood-branded timeshare properties were also affected. None of the Marriott-branded chains were threatened.

Not as huge, but still huge

Marriott said Friday that it now believes the overall number of guests potentially involved is around 383 million, less than the initial estimate of 500 million, but still one of the largest security breaches on record.

In the biggest corporate hack on record, data belonging to 3 billion Yahoo users was compromised in 2013. Telecom giant Verizon, which completed a deal to buy Yahoo in 2017 for $4.5 billion deal, later said the security breach was discovered when companies were being integrated.

A 2016 cyberattack on Friend Finder Networks, a network of adult dating and webcam sites, exposed 412 million user accounts. Individuals' usernames, emails and passwords were leaked from dating and hookup websites including Adult FriendFinder, Cams.com and Penthouse.

The 2017 Equifax hack affected more than 145 million people. A Target breach in 2013 affected more than 41 million payment card accounts and exposed contact information for more than 60 million customers.

First published on January 4, 2019

© 2019 The Associated Press. All Rights Reserved. This material may not be published, broadcast, rewritten, or redistributed.

More than 5 million passports exposed in massive Marriott hack

Hotel chain now estimates that 383 million guest accounts were breached, one of the biggest hacks on record

updated 1M ago

Former protégé testifies against "El Chapo"

Vicente Zambada is the son of El Chapo's partner, Ismael "El Mayo" Zambada

updated 2M ago

Trump says shutdown could last for months or years

The president will make an appearance in the Rose Garden following the meeting with top Republicans and Democrats

updated 5M ago

U.S. believes airstrike killed terrorist behind USS Cole bombing

Al-Badawi, who was listed on the FBI's most wanted terrorists list, escaped from prison in 2006

updated 0M ago

Have an obscure interest? There's a House caucus for that

Caucuses provide House members to outline their priorities and interests, from neuroscience to rugby

updated 31M ago

Trump says shutdown could last for months or years

The president will make an appearance in the Rose Garden following the meeting with top Republicans and Democrats

updated 5M ago

Have an obscure interest? There's a House caucus for that

Caucuses provide House members to outline their priorities and interests, from neuroscience to rugby

updated 31M ago

Every government shutdown – and how long they lasted

Past government shutdowns were usually resolved in a few days or dragged on for two or three weeks

1H ago

Bernie Sanders addresses campaign sexism and harassment claims

Sanders is expected to launch another bid for president

1H ago

Officials face deadline to move 1,500 children from "tent city"

The Tornillo, Texas facility is funded through Jan. 31, but still houses 1,500 children

1H ago

U.S. believes airstrike killed terrorist behind USS Cole bombing

Al-Badawi, who was listed on the FBI's most wanted terrorists list, escaped from prison in 2006

updated 0M ago

Family of American detained in Russia urges Congress to take action

The family of Paul Whelan, an American man detained in Russia, is urging Congress to ensure his release from detention

1H ago

Officials face deadline to move 1,500 children from "tent city"

The Tornillo, Texas facility is funded through Jan. 31, but still houses 1,500 children

1H ago

Iran says warships coming to the Atlantic for 1st time

Islamic Republic's navy has been touting a maiden voyage to the U.S.'s back yard for a while, now they say a new destroyer will set sail this spring

3H ago

Monks show off mobility to protest driving ticket blamed on robe

Man refuses to pay traffic ticket and his fellow monks are now using social media to prove their robes do not inhibit mobility

4H ago

Ed Sheeran ordered to face lawsuit accusing him of plagiarizing Marvin Gaye

Lawsuit accuses songwriter of lifting Gaye's 1973 classic "Let's Get it On" for his 2014 hit "Thinking Out Loud"

3H ago

Book excerpt: Michael Caine's "Blowing the Bloody Doors Off: And Other Lessons in Life"

In his new memoir the actor discusses life lessons, including how to "use the difficulty" when facing obstacles

5H ago

Ellen reveals she called Academy in bid to re-hire Kevin Hart as Oscars host

Kevin Hart stepped down last month, after facing criticism over homophobic tweets from several years ago that resurfaced online

5H ago

Season of Neil deGrasse Tyson's show put on hold

The National Geographic channel said new episodes of the science-based talk show won't air until an investigation involving Tyson is completed

10H ago

Olivia Newton-John says health rumors "greatly exaggerated"

The Australian singer is squashing tabloid rumors that she has just weeks to live

19H ago

Ambitious effort to clean up Great Pacific Garbage Patch faces major setback

Inventor Boyan Slat wants to clean up more than 1.8 trillion pieces of plastic in the water between California and Hawaii

19H ago

Apple's "darkest day" raises doubts about iPhone's future

Waning demand for the tech giant's flagship product has some analysts asking where the company goes from here

22H ago

First meteor shower of 2019 peaks Thursday

It's the first meteor shower of 2019 – and it's not the only astronomical phenomenon taking place this month

Jan 3

Chinese spacecraft landed on the far side of the moon

The unmanned spacecraft, the Chang'e 4, touched down at 10:26 a.m., China Central Television said in a brief announcement

Jan 3

Does artificial intelligence put our power grid at risk?

"There's more risk than we have ever had before," says cybersecurity expert Rob Lee

Jan 3

Do sugar-free sweeteners really help you lose weight?

Researchers reviewed more than 50 studies and found little evidence of any health benefits

Jan 3

"Sicker, Fatter, Poorer": The cost of hormone-disrupting chemicals

"We found that these exposures cost the United States $340 billion a year. That's 2.3 percent of our gross domestic product," says Dr. Leonardo Trasande

23H ago

Sunflower butter recalled after customer finds listeria

Oskri Organics said it was informed by a customer that they "randomly" sent its product in for testing

Jan 3

The best overall diets for 2019

If getting healthy is one of your New Year's resolutions, check out this ranking of the top overall diets for 2019

Jan 2

Big Pharma raises prices of more than 1,000 drugs

Consumers may have to pay more for a range of medications in 2019 as drugmakers boost their costs

Jan 2

More than 5 million passports exposed in massive Marriott hack

Hotel chain now estimates that 383 million guest accounts were breached, one of the biggest hacks on record

updated 1M ago

Ford recalls nearly 1 million vehicles over exploding air bags

It's part of the biggest series of recalls in U.S. history, spurred by air bags that can explode and hurl shrapnel

2H ago

Fed Chair says he wouldn't resign if Trump asked

Central bank chief, joined by Janet Yellen and Ben Bernanke, says monetary policy must remain independent of politics

1H ago

Stocks soar on blowout jobs report

The Dow soared more than 500 points after the U.S. government reported stronger-than-expected hiring in December

1H ago

New credit score changes help consumers – and lenders

Giving Experian and FICO access to your utility bill-paying history or bank account, lets lenders find new customers

4H ago

Former protégé testifies against "El Chapo"

Vicente Zambada is the son of El Chapo's partner, Ismael "El Mayo" Zambada

updated 2M ago

Police ID woman accused of killing manicurist over $35

Las Vegas woman was being sought for allegedly using a stolen car to run over and kill a Las Vegas nail salon owner

5H ago

Police believe Idaho woman disposed of missing Colorado mom's phone

Details of the Idaho woman's relationship with Berreth's fiancé are unclear, but they reportedly knew each other for years

7H ago

Video shows suspect's truck before killing of 7-year-old girl

Search is ongoing for the suspect in the Houston shooting death of the second grader

7H ago

Video shows Miami-area police sergeant kicking handcuffed suspect

Officer is also seen dropping his knee on suspect's neck; he's been criminally charged

9H ago