Hospitality group Marriott International is facing multiple US class actions and a possible GDPR fine over a massive data breach that went undetected for four years. Filed under USA IT & Data Protection