Hi All,

I just wanted to check my wife`s MR account and found a data security breach on the Marriott website. I logged out of my account and signed in with her MR number and password. It pulled up her account info with name, MR number, amount of points correctly. But when I went into the account activity, it shows the entire account history of MY account - not my wifes! Even when I change dates, click a bit around... it will stay my account activity info.

Now, not that I have any stays to hide from my wife but this is a bad leak in my mind. Could be anybody else log into their account at another computer after I logged out and they would see what my account history is.

How should I handle this? Report to Marriott rep on FT? Can anybody reproduce it at their computer? Browser is IE.

Thanks!