I don't recall receiving a notification from Marriott about this data breach, which means Marriott is in breach of the Australian Privacy Act 1988 as well, subject to a maximum penalty of $2.1 million per affected Australian resident as they clearly carry on business in Australia. And for us they offer nothing, not even a year's free credit monitoring. Hell, they aren't even throwing us some Marriott Points as a token gesture!