Another point of confusion, the Marriott website says Starwood Guest database security incident. Last I checked Starwood (at least from an IT and branding perspective) ceased to exist in August. It's now just one Marriott (or as I like to call it SPMarriott). I also highly doubt that only Starwood reservations are impacted by this, it's likely the whole shebang given the sheer number of records involved and it was discovered after the integration of the two IT systems (September 2018). If we didn't have Equifax, Yahoo and the dozens of other security breaches I would be surprised.
Let's hope that SPMarriott offers a better goodwill gesture to their elites then free credit monitoring, a benefit found on even the most rudimentary of credit cards.
Safe Travels,
James