
AIR Worldwide has estimated that the data breach Marriott recently reported resulted in direct cyber incident losses somewhere between $200 million and $600 million. According to a report by AIR, the range of loss estimates is due to the uncertainty regarding the data that was stolen. While credit card data was stolen due to the breach, the hotel company has claimed that the information was encrypted for security purposes. However, it is still unknown whether the hackers also stole the decryption information required to access the information. There is also another level of uncertainty in that some of the customer records could be duplicates, AIR noted.