Brian Krebs recently posted about this:https://krebsonsecurity.com/2018/12/what-the-marriott-breach...