Marriott International, Inc.

Companies / web services

Aliases / services: マリオット・インターナショナル / Marriott / Starwood / スターウッド / Marriott International, Inc.
Official website: https://www.marriott.com/

Sources identifying the operating company

https://marriott.gcs-web.com/news-releases/news-release-details/marriott-announces-starwood-guest-reservation-database-security

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

legacy Starwood guest reservation database

Response status: Not listed
Response information checked: 2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The incident concerns Starwood reservations on or before September 10, 2018. A 2024 update corrects the reported protection of some card/passport numbers from AES-128 to SHA-1.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review relevant notices and watch for suspicious card activity. Do not extend this legacy-system incident to every current reservation service.

Official service URL

https://www.marriott.com/

Source URLs

Operator and official informationhttps://marriott.gcs-web.com/news-releases/news-release-details/marriott-announces-starwood-guest-reservation-database-securityService and operation documentation

Related official sources

Operator and official informationOfficial information directoryIdentifies Marriott International, Inc. and the relevant service scope.
2018-11-30 / 2024-04-17 official security noticeOfficial notice; link to this PHP incident unconfirmedThe incident concerns Starwood reservations on or before September 10, 2018.