Wow, people are jaded on this forum. Breach of your privacy should not be the norm. There are data privacy laws that specifically try to prevent these from being the norm. In any case, OP - your best bet for compensation would be joining the class action (which will net customers next to nothing, but the lawyers in millions) or opt of the class action and suing individually. There are too many people affected by the breach (me being one of them) for Marriott to handle one by one.