Die Kosten belaufen sich bis dato auf USD 28 Mio. Die meisten Kosten, so der aktuelle Jahresbericht, werden über Versicherungen gedeckt. Alles gut? Der folgende Beitrag vom Harvard Business Review zeigt, wo bei diesen Datenlecks die "systemischen" Risiken liegen:
Another year and another hack and what seems like a very long wait to learn that it happened. Recently, Marriott waited 11 weeks to reveal that 383 million customer records had been compromised, exposing at least 25 million passport numbers and 8 million payment cards. Can you imagine a company like Marriott waiting for 11 weeks to disclose its quarterly earnings numbers? That wouldn’t be acceptable; why is waiting that long to disclose this type of incident? The Marriott breach offers four takeaways that can be useful to both senior managers and regulators: 1) cyber risk disclosure continues to be inadequate; 2) special events such as mergers and associated cost cutting can trigger cyber breaches; 3) systemic cyber risk in the system is building; and 4) boards continue to be unprepared or unqualified to deal with cyber risk.