Marriott International is facing a class-action lawsuit after a data breach affected “hundreds of millions” of guest records between July 2014 and September 2018 at Starwood Hotel Group.

The lawsuit has been launched on behalf of guests who made reservations at the hotel brands during this period, whom are determined to make an example of large brands shrugging off such activity. They say the cyber attack was a result of “failure to take adequate steps to ensure the security of guests’ personal data, and to prevent unauthorised and unlawful processing of that data”, which was in turn a breach of GDPR.

Read more: