X

Clues to Marriott data breach suggest China ties, report says

The tactics used are similar to those employed in earlier attacks linked to the Chinese government.

Zoey Chong Reporter
Zoey is CNET's Asia News Reporter based in Singapore. She prefers variety to monotony and owns an Android mobile device, a Windows PC and Apple's MacBook Pro all at the same time. Outside of the office, she can be found binging on Korean variety shows, if not chilling out with a book at a café recommended by a friend.
Zoey Chong
2 min read
US-crime-hotels-hacking-economy

Private investigators found clues that suggest the Chinese government could have something to do with Marriott's data breach.

Nicholas Kamm/AFP/Getty Images

Chinese intelligence could have been involved in the data breach that affected 500 million guests who have made reservations with hotels under Marriott's Starwood division, Reuters reported today.

Private investigators involved in a probe into the breach discovered hacking tools, techniques and procedures that were used in earlier cyberattacks that have been linked to Chinese hackers, according to the publication which cited anonymous sources.

These clues suggest Chinese hackers could have orchestrated a campaign with the intention of harvesting data for Beijing's espionage efforts, said the unnamed sources. They also noted that someone else could also have launched the attack because some of the same hacking tools used in the attack were previously made accessible online.

The best PCs for privacy-minded people

See all photos

Investigators believe there may have been more than one hacking group inside the guest reservation network for Marriot's Starwood division at the same time. This could make it harder to identify the culprit, as one of the sources noted. It's been four years since the hack was launched in 2014.

The data breach at Marriott, which puts personal information such as credit numbers, names, mailing addresses, phone numbers, email address, passport numbers and other sensitive data at risk, is one of many that have come to light in recent days. Other breaches include the Cathay Pacific hack, which affected 9.4 million people, and one at Facebook that put the data of 50 million users at risk. Concerned lawmakers on Capitol Hill urged Congress to pass data privacy and security protections to safeguard sensitive consumer information just hours after Marriott announced the data breach on Friday.

Watch this: What we know -- and you should do -- about the Marriott hack