Marriott Guests, Both Lawyers, File First Class Action Over Data Breach
“Large, sophisticated companies like Marriott are not blind to the risks posed by cyber criminals, who are constantly attempting to infiltrate corporations that store sensitive consumer information, said plaintiffs' attorney John Yanchunis of Morgan & Morgan. “The fact that a breach that began in 2014 went undetected for four years is shocking and horrifying.”
November 30, 2018 at 06:30 PM
4 minute read
|
The first lawsuit filed over Marriott International Inc.'s data breach comes just hours after the hotel chain's announcement Friday of the hack—and two lawyers are the plaintiffs.
The suit, filed in federal court in Maryland by attorneys Harry Bell and Ed Claffy, alleges that Marriott's failure to invest sufficient resources in security programs caused the cyberattack, which compromised the personal information of 500 million guests of its Starwood properties, such as the W Hotel and Westin Hotels & Resorts, beginning in 2014. Morgan & Morgan filed the class action on behalf of the two lawyers and a nationwide class of Marriott consumers.
“I am highly disappointed in the fact these companies, Marriott/Starwood, with whom I have had a loyal relationship with for many years allowed this to happen,” Bell wrote in an email. “I reached out to John Morgan and his team due to their leadership and experience in claims of this type. My private information should be secure when I deal with companies such as these.”
Morgan & Morgan's John Yanchunis in Tampa, Florida, who was lead counsel in the Yahoo data breach litigation that settled Oct. 22 for $85 million, filed the suit along with William Murphy of Murphy Falcon Murphy in Baltimore.
“Large, sophisticated companies like Marriott are not blind to the risks posed by cyber criminals, who are constantly attempting to infiltrate corporations that store sensitive consumer information,” Yanchunis said. “The fact that a breach that began in 2014 went undetected for four years is shocking and horrifying.”
A Marriott spokesman did not respond to a request for comment about the lawsuit.
On its website, Marriott said it had begun sending email notifications Friday to all those affected and is offering guests free enrollment for a year in WebWatcher, which monitors Internet sites and alerts consumers if their personal information appears.
“Marriott values our guests and understands the importance of protecting personal information,” the hotel said. “Marriott deeply regrets this incident happened. From the start, we moved quickly to contain the incident and conduct a thorough investigation with the assistance of leading security experts. Marriott is working hard to ensure our guests have answers to questions about their personal information with a dedicated website and call center.”
Marriott's announcement said it received a security alert Sept. 8 but did not discover what the specific compromised information was until Nov. 19. The investigation found that hackers had accessed the reservations database for its Starwood properties starting beginning in 2014. Its investigation is ongoing, and the hotel has notified regulatory authorities and been in touch with law enforcement.
According to Marriott, the hack compromised the names, addresses and other information of its guests, about 327 million of whom might have had their passport numbers stolen. The hack also involved credit card numbers “for some,” despite encryption measures.
According to the suit, plaintiff Claffy, a partner at Thompson Flanagan in Chicago, stayed at Marriott hotels for the past eight years, and plaintiff Bell, of Stewart Bell in Charleston, West Virginia, “for decades.”
The suit seeks punitive damages and reimbursement for fraudulent credit or debit card charges, out-of-pocket expenses incurred due to the breach, costs associated with not being able to use accounts and “ascertainable losses in the form of deprivation of the value” of plaintiffs' personal information. It also called Marriott's WebWatcher offering “inadequate” and sought “appropriate credit monitoring services.”
The suit cites Federal Trade Commission guidelines, provided in a 2016 publication called Protecting Personal Information: A Guide for Business, and the federal agency's enforcement actions against businesses for violating Section 5 of the Federal Trade Commission Act.
“Marriott's failure to employ reasonable and appropriate measures to protect against unauthorized access to confidential consumer data constitutes an unfair act or practice prohibited by Section 5 of the FTC Act,” the complaint says.
FTC Chairman Joe Simons has pushed this year for legislation that would give the federal agency more power to levy fines over data breaches.
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllA Reporter and a Mayor: Behind the Scenes During the Eric Adams Indictment News Cycle
NY Appeals Court Grants J&J's Subpoena for Talc Expert As 'Clearly Relevant'
6 minute readGirardi's Lawyers Move for New Trial: He Doesn't Remember Jury's Verdict
6 minute readTrending Stories
Who Got The Work
Dechert partners Andrew J. Levander, Angela M. Liu and Neil A. Steiner have stepped in to defend Arbor Realty Trust and certain executives in a pending securities class action. The complaint, filed July 31 in New York Eastern District Court by Levi & Korsinsky, contends that the defendants concealed a 'toxic' mobile home portfolio, vastly overstated collateral in regards to the company's loans and failed to disclose an investigation of the company by the FBI. The case, assigned to U.S. District Judge Pamela K. Chen, is 1:24-cv-05347, Martin v. Arbor Realty Trust, Inc. et al.
Who Got The Work
Arthur G. Jakoby, Ryan Feeney and Maxim M.L. Nowak from Herrick Feinstein have stepped in to defend Charles Dilluvio and Seacor Capital in a pending securities lawsuit. The complaint, filed Sept. 30 in New York Southern District Court by the Securities and Exchange Commission, accuses the defendants of using consulting agreements, attorney opinion letters and other mechanisms to skirt regulations limiting stock sales by affiliate companies and allowing the defendants to unlawfully profit from sales of Enzolytics stock. The case, assigned to U.S. District Judge Andrew L. Carter Jr., is 1:24-cv-07362, Securities and Exchange Commission v. Zhabilov et al.
Who Got The Work
Clark Hill members Vincent Roskovensky and Kevin B. Watson have entered appearances for Architectural Steel and Associated Products in a pending environmental lawsuit. The complaint, filed Aug. 27 in Pennsylvania Eastern District Court by Brodsky & Smith on behalf of Hung Trinh, accuses the defendant of discharging polluted stormwater from its steel facility without a permit in violation of the Clean Water Act. The case, assigned to U.S. District Judge Gerald J. Pappert, is 2:24-cv-04490, Trinh v. Architectural Steel And Associated Products, Inc.
Who Got The Work
Michael R. Yellin of Cole Schotz has entered an appearance for S2 d/b/a the Shoe Surgeon, Dominic Chambrone a/k/a Dominic Ciambrone and other defendants in a pending trademark infringement lawsuit. The case, filed July 15 in New York Southern District Court by DLA Piper on behalf of Nike, seeks to enjoin Ciambrone and the other defendants in their attempts to build an 'entire multifaceted' retail empire through their unauthorized use of Nike’s trademark rights. The case, assigned to U.S. District Judge Naomi Reice Buchwald, is 1:24-cv-05307, Nike Inc. v. S2, Inc. et al.
Who Got The Work
Sullivan & Cromwell partner Adam S. Paris has entered an appearance for Orthofix Medical in a pending securities class action arising from a proposed acquisition of SeaSpine by Orthofix. The suit, filed Sept. 6 in California Southern District Court, by Girard Sharp and the Hall Firm, contends that the offering materials and related oral communications contained untrue statements of material fact. According to the complaint, the defendants made a series of misrepresentations about Orthofix’s disclosure controls and internal controls over financial reporting and ethical compliance. The case, assigned to U.S. District Judge Linda Lopez, is 3:24-cv-01593, O'Hara v. Orthofix Medical Inc. et al.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250