Originally Posted by nsummy

I think marriott is trying to spread the blame around for this. Their statements are contradicting:





Common sense would dictate if there was proof that info was copied using unauthorized access to the Starwood database, that the contents would be from the Starwood database. You don't need to decrypt it to figure that part out. I think more than likely this breach didn't occur until Marriott purchased Starwoow, and what they really mean is that the data spans 4 years. I am an IT system administrator and I find it highly unlikely that this breach has been ongoing for 4 years straight! Not just unlikely, virtually impossible. These things are generally found out pretty quickly, though almost always after the damage is done. This would be quite the coincidence that with their major integration problems that this is a separate, unrelated incident