Morgan & Morgan Files First Marriott Data Breach Class Action
Tampa's John Yanchunis, lead counsel in the $85 million Yahoo data breach settlement in October, filed suit in Maryland against Bethesda-based Marriott.
November 30, 2018 at 06:30 PM
4 minute read
The original version of this story was published on Law.com
The first lawsuit filed over Marriott International Inc.'s data breach comes just hours after the hotel chain's announcement of the hack — and two lawyers are the plaintiffs.
The suit, filed in federal court in Maryland on behalf of attorneys Harry Bell and Ed Claffy, alleges Bethesda-based Marriott's failure to invest sufficient resources in security programs allowed the cyberattack, which compromised the personal information of 500 million guests of its Starwood properties, such as the W Hotel and Westin Hotels & Resorts, beginning in 2014. Morgan & Morgan filed the class action on behalf of the two lawyers and a nationwide class of Marriott consumers.
“I am highly disappointed in the fact these companies, Marriott/Starwood, with whom I have had a loyal relationship with for many years allowed this to happen,” Bell wrote in an email. “I reached out to John Morgan and his team due to their leadership and experience in claims of this type. My private information should be secure when I deal with companies such as these.”
Morgan & Morgan's John Yanchunis in Tampa, who was lead counsel in the Yahoo data breach litigation that settled Oct. 22 for $85 million, filed the suit along with William Murphy of Murphy Falcon Murphy in Baltimore.
“Large, sophisticated companies like Marriott are not blind to the risks posed by cyber criminals, who are constantly attempting to infiltrate corporations that store sensitive consumer information,” Yanchunis said. “The fact that a breach that began in 2014 went undetected for four years is shocking and horrifying.”
A Marriott spokesman did not respond to a request for comment by deadline.
On its website, Marriott said it had begun sending email notifications Friday to all those affected and is offering guests free enrollment for a year in WebWatcher, which monitors Internet sites and alerts consumers if their personal information appears.
“Marriott values our guests and understands the importance of protecting personal information,” the hotel chain said. “Marriott deeply regrets this incident happened. From the start, we moved quickly to contain the incident and conduct a thorough investigation with the assistance of leading security experts. Marriott is working hard to ensure our guests have answers to questions about their personal information with a dedicated website and call center.”
Marriott's announcement said it received a security alert Sept. 8 but did not discover what the specific compromised information was until Nov. 19. The investigation determined hackers had accessed the reservations database for its Starwood properties beginning in 2014. The internal investigation is ongoing, and the hotel has notified regulatory authorities and been in touch with law enforcement.
The company said the hack compromised the names, addresses and other information of its guests, about 327 million of whom might have had their passport numbers stolen. The hack also involved credit card numbers “for some,” despite encryption measures.
The lawsuit said Claffy, a partner at Thompson Flanagan in Chicago, stayed at Marriott hotels for the past eight years and Bell of Stewart Bell in Charleston, West Virginia, “for decades.”
The suit seeks punitive damages and reimbursement for fraudulent credit or debit card charges, out-of-pocket expenses incurred due to the breach, costs associated with not being able to use accounts and “ascertainable losses in the form of deprivation of the value” of plaintiffs' personal information. It also called Marriott's WebWatcher offering “inadequate” and sought “appropriate credit monitoring services.”
The suit cites Federal Trade Commission guidelines provided in a 2016 publication called “Protecting Personal Information: A Guide for Business,” and the federal agency's enforcement actions against businesses for violating Section 5 of the Federal Trade Commission Act.
“Marriott's failure to employ reasonable and appropriate measures to protect against unauthorized access to confidential consumer data constitutes an unfair act or practice prohibited by Section 5 of the FTC Act,” the complaint says.
FTC Chairman Joe Simons has pushed this year for legislation that would give the federal agency more power to levy fines over data breaches.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllEmployee's Alleged Action Lands Marriott in Court for Defamation, Negligence
Wave of Office Closures Highlights the Weighty Stakes Surrounding Law Firm Growth
7 minute readQuinn Emanuel's Miami Office Cracks 20 Attorneys, Three Years After Arrival
3 minute readJudge Dismisses Civilian Investigative Panel Lawsuit: A Setback for Miami's Police Oversight
5 minute readTrending Stories
Who Got The Work
Arthur G. Jakoby, Ryan Feeney and Maxim M.L. Nowak from Herrick Feinstein have stepped in to defend Charles Dilluvio and Seacor Capital in a pending securities lawsuit. The complaint, filed Sept. 30 in New York Southern District Court by the Securities and Exchange Commission, accuses the defendants of using consulting agreements, attorney opinion letters and other mechanisms to skirt regulations limiting stock sales by affiliate companies and allowing the defendants to unlawfully profit from sales of Enzolytics stock. The case, assigned to U.S. District Judge Andrew L. Carter Jr., is 1:24-cv-07362, Securities and Exchange Commission v. Zhabilov et al.
Who Got The Work
Clark Hill members Vincent Roskovensky and Kevin B. Watson have entered appearances for Architectural Steel and Associated Products in a pending environmental lawsuit. The complaint, filed Aug. 27 in Pennsylvania Eastern District Court by Brodsky & Smith on behalf of Hung Trinh, accuses the defendant of discharging polluted stormwater from its steel facility without a permit in violation of the Clean Water Act. The case, assigned to U.S. District Judge Gerald J. Pappert, is 2:24-cv-04490, Trinh v. Architectural Steel And Associated Products, Inc.
Who Got The Work
Michael R. Yellin of Cole Schotz has entered an appearance for S2 d/b/a the Shoe Surgeon, Dominic Chambrone a/k/a Dominic Ciambrone and other defendants in a pending trademark infringement lawsuit. The case, filed July 15 in New York Southern District Court by DLA Piper on behalf of Nike, seeks to enjoin Ciambrone and the other defendants in their attempts to build an 'entire multifaceted' retail empire through their unauthorized use of Nike’s trademark rights. The case, assigned to U.S. District Judge Naomi Reice Buchwald, is 1:24-cv-05307, Nike Inc. v. S2, Inc. et al.
Who Got The Work
Sullivan & Cromwell partner Adam S. Paris has entered an appearance for Orthofix Medical in a pending securities class action arising from a proposed acquisition of SeaSpine by Orthofix. The suit, filed Sept. 6 in California Southern District Court, by Girard Sharp and the Hall Firm, contends that the offering materials and related oral communications contained untrue statements of material fact. According to the complaint, the defendants made a series of misrepresentations about Orthofix’s disclosure controls and internal controls over financial reporting and ethical compliance. The case, assigned to U.S. District Judge Linda Lopez, is 3:24-cv-01593, O'Hara v. Orthofix Medical Inc. et al.
Who Got The Work
Attorneys from Cadwalader, Wickersham & Taft and Pryor Cashman have entered appearances for Diageo Americas Supply d/b/a Ciroc Distilling Co. and Sony Songs, a division of Sony Music Publishing, respectively, in a pending lawsuit. The case was filed Sept. 10 in New York Southern District Court by the Bloom Firm and IP Legal Studio on behalf of Dawn Angelique Richard. The plaintiff, who performed as a member of producer Sean 'Diddy' Combs girl group Danity Kane and later his band, Diddy - Dirty Money, claims that she was financially exploited by Combs and subjected to inhumane working conditions. Among other violations, Richard claims that Combs required group members to remain at his residences and studios, deprived them of adequate food and sleep and forced them to rehearse for 36 to 48 hours without breaks. The case, assigned to U.S. District Judge Katherine Polk Failla, is 1:24-cv-06848, Richard v. Combs et al.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250