The hotel chain found that since 2014, an undetected hacker had unauthorized access to names, emails and in 327 million peoples’ cases, passport numbers. Marriott became aware of the hack in early September and announced it mid-November.

https://acfeinsights.squarespace.com/acfe-insights/what-the-marriott-data-breach-means