Indiana Attorney General Todd Rokita announced today that a coalition of 50 attorneys general has reached a settlement with Marriott International Inc., the result of a multi-year investigation into a massive data breach which targeted one of its guest reservation databases.
Under the settlement with the attorneys general, Marriott has agreed to strengthen its data security practices using a dynamic risk-based approach, to provide certain consumer protections, and to make a $52 million payment to states.
Indiana will receive over $900,000 from the settlement.
“Protecting Hoosiers’ personal data, whether they are checking into a hotel or just checking out potential travel plans, is an important priority of our office,” Attorney General Rokita said. “That’swhy we hold corporations accountable for responsibly handling consumers’ information. This settlement shows once again our resolve to make sure corporations are vigilant in following security protocols.”
The Federal Trade Commission, which has coordinated closely with the states throughout this investigation, has reached a parallel settlement with Marriott.
Marriott acquired Starwood in 2016 and took control of the Starwood computer network in 2016. However, from July 2014 until September 2018, intruders in the system went undetected. This led to the breach of 131.5 million guest records pertaining to customers in the United States. The impacted records included contact information, gender, dates of birth, legacy Starwood Preferred Guest information, reservation information, and hotel stay preferences, as well as a limited number of unencrypted passport numbers and unexpired payment card information.
Shortly after the breach of the Starwood database was announced, a coalition of 50 attorneys general launched a multi-state investigation into the breach. Today’s settlement resolves allegations by the attorneys general that Marriott violated state consumer protection laws, personal information protection laws, and, where applicable, breach notification laws by failing to implementreasonable data security and remediate data security deficiencies, particularly when attempting to use and integrate Starwood into its systems.
Under the terms of the settlement, Marriott has agreed to strengthen and continually improve its cybersecurity practices. Some of the specific measures include:
- Implementation of a comprehensive Information Security Program. This includes new overarching security program mandates, such as incorporating zero-trust principles, regular security reporting to the highest levels within the company, including the Chief Executive Officer, and enhanced employee training on data handling and security.
- Data minimization and disposal requirements, which will lead to less consumer data being collected and retained.
- Specific security requirements with respect to consumer data, including component hardening, conducting an asset inventory, encryption, segmentation to limit an intruder’s ability to move across a system, patch management to ensure that critical security patches are applied in a timely manner, intrusion detection, user access controls, and logging and monitoring to keep track of movement of files and users within the network.
- Increased vendor and franchisee oversight, with a special emphasis on risk assessments for “Critical IT Vendors,” and clearly outlined contracts with cloud providers.
- In the future, if Marriott acquires another entity, it must timely further assess the acquired entity’s information security program and develop plans to address identified gaps or deficiencies in security as part of the integration into Marriott’s network.
- An independent third-party assessment of Marriott’s information security program every two years for a period of 20 years for additional security oversight.
As part of the settlement, Marriott will give consumers specific protections, including a data deletion option, even if consumers do not currently have that right under state law. Marriott must offer multi-factor authentication to consumers for their loyalty rewards accounts, such as Marriott Bonvoy, as well as reviews of those accounts if there is suspicious activity.
Owner ordered to pay nearly $350K in restitution, banned from industry
Indiana Attorney General Todd Rokita has taken down another group of businesses engaged is shady practices that violate the standards that Hoosier consumers have a right to expect.
This time, it’s a home-improvement contractor who allegedly tried running off with hundreds of thousands of dollars collected from hard-working homeowners without providing the anticipated services.
“Here in Indiana, we won’t tolerate businesses that collect payment and then fail to do the work they promised,” Attorney General Rokita said. “We will always work to hold accountable businesses that violate the trust placed in them by hard-working Hoosiers.”
Attorney General Rokita and his Consumer Protection team won a combination judgment of both civil penalties and restitution totaling $341,006.81 on behalf of numerous Hoosiers duped by Quest Concrete LLC and Cobraro & Company LLC — doing business as Quest Exteriors. These are an intertwining network of “home improvement” contractors that allegedly improved nothing but the businesses’ own financial situations.
Attorney General Rokita also secured a permanent injunction that bans from the construction industry Michael Gossett, the head of both LLCs, and all primary affiliates — including agents, representatives, employees and successors involved with ripping off Hoosier consumers.
Rokita commends Deputy Attorney General Tamara Weaver for her hard work in removing Quest Concrete and their affiliates from the Indiana marketplace and for helping to win the nearly $350,000 restitution order from the court.
Indiana Attorney General Todd Rokita is co-leading a 14-state lawsuit against the Federal Communications Commission's (FCC’s) new rule that could limit phone calls for inmates and prevent local police from performing one of their most basic functions — investigating and preventing crimes by surveilling inmate calls.
By capping the cost for inmates far below any reasonable level, the FCC will impose new costs on taxpayers and deprive state and local authorities of many safety benefits that come from allowing inmates access to audio and video calls. The FCC’s new rule would likely force some jails to eliminate such services altogether — directly undermining the goal of expanding inmate access to calls that the FCC claims it is pursuing.
“Federal bureaucrats at the FCC are trying to dictate to our local sheriffs and state prison administrators how to manage their prison facilities,” Attorney General Rokita said. “Their unlawful tampering runs a very real risk of making our jails and therefore our communities less safe. That’s why we’re stepping forward to protect the interests of sheriffs, correctional officers, the Indiana Department of Correction and all Hoosiers to challenge this rule and defend common sense.”
Attorney General Rokita’s multistate challenge seeks the reversal of unlawful regulations that, among other things, impermissibly intrude into how state and local prisons and jails provide communication services to inmates. The feds’ new inmate phone call rules threaten to dismantle the monitoring of inmate communications — a valuable investigative tool available to local law enforcement.
Granting inmates’ access to communication services — which include both calls and other online services accessible by tablets, such as legal resources and religious materials — helps reduce violence and other disruptive behavior in inmate populations. By monitoring inmate calls, facilities are also able to identify suicide risks and criminal activity and gather information that can help solve crimes. Providing communication services for inmates has become a vital tool that state and local authorities rely on to keep inmates and the public safe.
By issuing this rule, the FCC has far exceeded its statutory authority to regulate inmate communication services and ignored important safety and economic considerations that should have guided the agency’s decision making.
Attorney General Rokita is co-leading this lawsuit with Arkansas Attorney General Tim Griffin. The 14 states will detail their arguments upon filing their opening brief later this year.
By Becky Killian, Staff Writer
When the new Salem Municipal Airport opened with a 3,000-foot runway in September 2019, it was expected the federal funding to construct the final 2,000 feet would be received in late 2022. That money from the Federal Aviation Administration (FAA) is still promised, but the runway completion has been delayed due to changes in how that agency funds projects, as well as the pandemic.
Board of Aviation President Jason Cockerill points to the uncompleted runway as the reason behind a crash that occurred Aug. 6 when a pilot from Pennsylvania was unable to stop the plane she was landing. The plane came to a stop in a soybean field.
“Had it [the runway] been longer, we probably wouldn’t have had that incident,” Cockerill said. “I hate that it happened. I’m glad nobody got hurt.” The pilot had been diverted to Salem from Bedford’s airport, which has a runway of about 4,500 feet.
The crash is currently being investigated by the National Transportation Safety Board. A final report is expected in about six months.
Salem’s runway was always planned to be 5,000 feet, which would accommodate small jets. However, during the pandemic, Cockerill said the FAA changed how it handled funding for projects. Rather than dispensing funding for a portion of a project, the goal became giving larger amounts of money so projects could be completed rather than done in stages. Since that change, other projects, mostly at larger airports, have been fully funded while smaller, already scheduled, funds trickle into Salem’s project.
“Most people do not realize that the FAA provides funding in stages and not completely upfront,” Cockerill said. “We can only do so much of the project each year based on the funding that is allocated. Additionally, most people do not realize that the funding from the FAA does not come from income or property tax revenue – the FAA aviation trust fund is funded from air-related travel taxes such as taxes on airline tickets or aviation fuel – so, in essence, aviation funds aviation projects which was also affected by COVID.”
Currently, the next round of funds from the FAA is expected in late 2026 and will be used to prepare the ground for the runway’s final 2,000 feet. That involves earth moving and grading; however, once the “grade and drain” is finished, the ground will have to be allowed to settle before runway construction begins – and that settling can take months due to the amount of soil that will be moved, the soil’s high clay content, and the water present in the area.
Cockerill and his fellow board members look forward to an October meeting with representatives from the FAA as well as the Indiana Department of Transportation. During that meeting, Cockerill said he intends to promote the economic impact the airport has on the community as well as the safety aspects of a longer runway. He also hopes to get an updated timeline for the project.
“The completion of the project opens the door for further economic growth, both in the jobs that are funded via work that's done on the project as well as the potential jobs that could come as a result of the finished project,” Cockerill said. “There is room near the airport for businesses to locate for those that just want based near an airport, such as the current flight school that's operating at the airport now.”
Airport officials have also asked the FAA for funding for another T-hangar, like the existing hangar located near the terminal building.
The airport has maintained a waiting list for hangar spots since the new facility opened. That list contained about 20 names as of July, Corey Harper, of H&R Aviation Consulting, said.
While waiting on the runway funding, airport officials have worked on other projects that aim to enhance and improve the airport, according to Harper. A parking lot has been installed and officials hope to lease ground to four individuals who want to construct hangars. That construction could begin this year. The individuals will lease ground from the airport and fund the construction of the hangars. Once the term of the lease has expired, ownership of the hangars will revert to the airport.
The airport also has a water and sewer extension that will be paid for with federal money the state is distributing through READI grants.
Despite the long wait for the completion of the 5,000-foot runway, Cockerill is grateful for what progress has been made.
“With the FAA contributing 90 percent of the funding for the project, then INDOT's contribution on top of that, it's hard to say that it hasn't been worth it for the community especially when you consider that the old runway was literally not safe.”
Salem Municipal Airport Board President Jason Cockerill believes the airport's uncompleted runway contributed to an Aug. 6 plane crash. No injuries resulted, according to Washington County Sheriff Brent Miller. Miller’s department, as well as Salem police, fire and EMS personnel, responded to the scene.
Photo by Sheriff Brent Miller
- Young, Peters Introduce Bipartisan Bill to Modernize Federal Agency Data Management
- Young, Durbin Applaud Congressional Passage of Congenital Heart Futures Reauthorization Act
- Protecting Hoosiers from Foreign Adversaries
- Young, Colleagues Introduce Bipartisan Bill to Support Domestic Processing of Critical Minerals
SalemLeader.com
Leader Publishing Company of Salem, Inc.
P.O. Box 506
117-119 East Walnut Street
Salem, Indiana. 47167
Phone: 812-883-3281 | Fax: 812-883-4446
Business Hours:
Mondays through Fridays, 9:00am - 5:00pm
News:
news@salemleader.com
Office:
office@salemleader.com
Publisher:
publisher@salemleader.com
Business
- More Business News
- Go To Guide
- Business Directory
- Auctions
Education
- More Education News
Opinion
- Editorials
- Letters to the Editor
- Columns
- Unsung Heroes
- Days Gone By
- In the Garden
- Guest Columns
- Reader's Poll
- Salem Leader Forum
- Questions and Answers
Church
- Bible Aerobics
- Church News
- Church Directory