Who Owns JW Marriott?

• Parent Company: Marriott International
• Ownership Type: Wholly owned
• Company Type: Publicly Traded
• Stock Ticker: NASDAQ: MAR

• Founded: 1984
• Founders: Marriott International

• Founded: 1927
• Headquarters: Bethesda, Maryland, USA
• Company Type: Publicly Traded
• Stock: NASDAQ: MAR
• Revenue: approximately $24.1 billion (FY2024)
• Employees: Approximately 418,000

Visit Marriott International website

• Headquarters: Bethesda, Maryland, USA
• Manufacturing / Operations: Global premium hotel locations

JW Marriott benefits from Marriott International's comprehensive sustainability framework through the Serve360 program, which integrates environmental responsibility into hotel design, operations, and supply chain management. The company's sustainability approach encompasses four key areas: reducing environmental impacts, designing and operating sustainable hotels, responsible sourcing, and community empowerment. JW Marriott properties implement energy-efficient technologies, water conservation measures, and waste reduction programs as part of Marriott's commitment to sustainable hospitality operations.

Marriott's environmental initiatives include significant investments in renewable energy, with properties like Westin Playa Conchal installing solar panels to reduce carbon footprint. The company has developed comprehensive sustainable building design resources including Business Case for Energy and Carbon Efficient Hotel Design, Building Envelope Design Guide, Solar Readiness Design Guide, and Building Sustainability Certification Toolkit. These resources assist owners, architects, and engineers in achieving high-performance building designs for new hotel construction projects, ensuring JW Marriott properties meet rigorous sustainability standards.

The company's responsible sourcing program focuses on integrating environmental and social practices into the supply chain, partnering with suppliers who share similar values for sustainability and ethical business practices. JW Marriott emphasizes local and sustainable sourcing to reduce negative environmental and social impacts while supporting local economies and communities. The brand's commitment to sustainability extends from design through the guest experience, with collaborative efforts involving associates, hotel owners, franchisees, suppliers, business partners, and guests to actively reduce environmental impact.

However, JW Marriott and Marriott International face significant ethical challenges related to data security and privacy protection. The company has been subject to major data breaches affecting hundreds of millions of customers worldwide, leading to regulatory action and substantial penalties. These security failures have damaged customer trust and highlighted the importance of robust data protection measures in the hospitality industry's increasingly digital operations.

JW Marriott has received extensive recognition for luxury hospitality excellence, service quality, and premium accommodations, though recent data security controversies have impacted some ethical considerations. The brand consistently ranks among the world's leading premium hotel brands, earning numerous awards for elegant accommodations, sophisticated business and leisure travel experiences, and exceptional service standards.

JW Marriott properties have been recognized by travel industry organizations and hospitality publications for luxury amenities, elegant design, and sophisticated service delivery. The brand's commitment to premium hospitality experiences has earned accolades from business travel publications, luxury travel guides, and customer satisfaction surveys that highlight JW Marriott's position in the premium hotel segment.

Marriott International's sustainability initiatives have been acknowledged by environmental organizations for comprehensive environmental management programs and sustainable building practices. The company's Serve360 program and sustainable hotel design resources have been highlighted as examples of corporate environmental leadership in the hospitality industry, though individual property recognition varies by location and implementation.

The brand's workplace culture and employee programs have received recognition for diversity and inclusion initiatives, with JW Marriott properties consistently ranked among premium hotels for workplace quality and professional development opportunities. The company's training programs and career advancement opportunities have been acknowledged for developing talent in the luxury hospitality sector.

However, the major data breaches and subsequent regulatory action have led to increased scrutiny from consumer advocacy organizations and data privacy experts, potentially impacting future consideration for corporate responsibility awards. While JW Marriott continues to receive recognition for hospitality excellence, the data security controversies have damaged the brand's reputation for customer data protection and ethical business practices.

FTC Data Security Action (October 2024): The Federal Trade Commission took action against Marriott International and Starwood Hotels & Resorts over multiple data breaches from 2014 to 2020 that impacted more than 344 million customers worldwide. The FTC alleged that Marriott and Starwood failed to implement reasonable data security measures, including inadequate password controls, access controls, firewall controls, network segmentation, software patching, network monitoring, and multifactor authentication. The settlement requires Marriott to implement a comprehensive information security program, provide data deletion options for customers, review loyalty rewards accounts for unauthorized activity, and restore stolen loyalty points.

Multiple Data Breaches (2014-2020): Marriott experienced at least three major data breaches affecting hundreds of millions of customers. The first breach began in June 2014, compromising payment card information of more than 40,000 Starwood customers and going undetected for 14 months. The second breach, starting around July 2014 and undetected until September 2018, allowed malicious actors to access 339 million Starwood guest records worldwide, including 5.25 million unencrypted passport numbers. The third breach, from September 2018 to February 2020, impacted Marriott's own network with 5.2 million guest records compromised, including data from 1.8 million Americans.

$52 Million Multistate Settlement (2024): Marriott agreed to pay a $52 million penalty to 49 states and the District of Columbia to resolve data security allegations related to the Starwood guest reservation database breach. The multistate settlement worked in parallel with the FTC investigation and addressed similar data security failures that led to the exposure of customer personal information across multiple breach incidents.

Class Action Lawsuit Reversal (June 2025): Marriott won an appeal to block a class action lawsuit over the data breaches, with the 4th Circuit Court of Appeals reversing a recertification of plaintiff classes in consolidated lawsuits. The reversal represented a partial legal victory for Marriott, though the company still faced significant regulatory penalties and required implementation of comprehensive data security improvements under the FTC settlement.

Data Security Failures: The FTC complaint detailed numerous security failures including failure to implement appropriate password controls, access controls, firewall controls, or network segmentation; failure to patch outdated software and systems; inadequate network logging and monitoring; and lack of multifactor authentication deployment. These systemic security weaknesses allowed malicious actors to access sensitive customer information over extended periods without detection.

Customer Data Protection Issues: The breaches exposed significant amounts of personal information including passport information, payment card numbers, loyalty numbers, dates of birth, email addresses, phone numbers, and mailing addresses. The exposure of passport numbers and other sensitive travel documents created particular risks for international travelers and raised concerns about identity theft and fraud.

Loyalty Program Security: The data breaches specifically compromised Marriott Bonvoy loyalty rewards program accounts, with malicious actors accessing and stealing loyalty points. The settlement requires Marriott to provide customers with methods to review unauthorized activity in their loyalty accounts and restore stolen points, addressing the specific impact on customer rewards programs.

Regulatory Compliance Requirements: Under the FTC settlement, Marriott must implement data minimization policies, retain personal information only as long as reasonably necessary, maintain a comprehensive information security program for 20 years with annual FTC certification, undergo independent third-party security assessments every two years, and provide customers with methods to request data deletion and account reviews.