500 million customers’ data exposed, including passport numbers, travel details, and other sensitive data – not a good day for Marriott/Starwood. Given the data hasn’t appeared on the dark web, government intelligence gathering is the most likely guess. Other than the obvious concerns, the length of the breach (starting in 2014 and up until now) and the data involved globally could mean massive GDPR fines from European regulators.