Marriott Intl Inc New — Key Risks
The Starwood Data Breach Still Creates Ongoing Legal Exposure
The 2018 Starwood data breach — where hackers accessed hundreds of millions of guest records — has not been fully put to rest. In 2024, Marriott reached settlements with the FTC and 49 state attorneys general, but those settlements come with long-term compliance requirements. Any future failure to meet those requirements could trigger enforcement actions, fines, or further penalties on top of the costs already incurred.
Cybersecurity Incidents Are a Recurring Problem, Not a One-Time Event
Marriott acknowledges it has experienced multiple cyberattacks beyond the 2018 breach, and explicitly warns that past incidents may make future ones worse in terms of reputational and financial damage. The company collects enormous amounts of guest data — credit card numbers, loyalty records, personal details — across thousands of properties it does not directly own, making the attack surface very wide and hard to control.
Marriott Depends Heavily on Hotel Owners It Cannot Fully Control
Rather than owning most of its hotels, Marriott franchises and manages properties owned by independent third parties. If those owners face financial distress, default on mortgages, or simply disagree with Marriott over costs and standards, agreements can be terminated — sometimes even when contracts say they cannot be. Lost agreements mean lost fee income, and courts have sometimes sided with hotel owners over Marriott's contractual rights.
The Loyalty Program Is a Core Business Asset That Could Erode
Marriott Bonvoy is central to how the company drives bookings and revenue from its co-branded credit card partnerships. If competitors offer more attractive rewards, if regulatory changes hurt credit card interchange economics (which fund loyalty programs), or if Marriott makes unpopular changes to the program, member engagement could drop — directly hurting both booking volumes and the significant revenue stream from credit card partners.
Third-Party Booking Platforms Squeeze Margins and Could Weaken Brand Loyalty
When guests book through online travel intermediaries like Expedia or Booking.com rather than Marriott's own app or website, the cost per booking is higher and Marriott loses direct control of the guest relationship. These platforms also run their own loyalty programs. The rise of AI-powered travel planning tools could further redirect guests away from Marriott's direct channels, increasing distribution costs and weakening brand attachment over time.
Labor Disruptions and Rising Wage Costs Hit Hotel Operations Directly
A significant share of workers at Marriott-managed hotels are covered by collective bargaining agreements, many of which are renegotiated each year. The company has experienced strikes and labor actions in the past. Even at franchised properties where Marriott does not control negotiations, labor disputes can damage the brand's reputation and guest experience. Rising labor costs industry-wide also compress the profitability of hotels in the system, which can reduce the fees owners are willing or able to pay.
A Large Pipeline of New Hotels May Not Actually Open
Marriott reports a substantial development pipeline of hotels under contract or in planning. But construction timelines have been lengthening due to financing difficulties, rising construction costs, and labor shortages. A meaningful portion of pipeline hotels — particularly those not yet under contract — may be delayed or cancelled entirely, which would slow the fee-generating growth investors expect from an asset-light hotel company.