The Complaint alleges that Defendants made materially false and/or misleading statements and/or failed to disclose that: (i) Marriott's and Starwood's systems storing their customers' personal data were not secure; (ii) there had been unauthorized access on Starwood's network since 2014; (iii) consequently, the personal data of approximately 500 million Starwood guests and sensitive personal information of approximately 327 million of those guests may have been exposed to unauthorized parties; and (iv) as a result, Marriott's public statements were materially false and/or misleading at all relevant times. On November 30, 2018, Marriott disclosed the discovery of "a data security incident involving [its] Starwood guest reservation database" and "that an unauthorized party had copied and encrypted information and took steps towards removing it." Marriott stated that "information on up to approximately 500 million guests" had been subject to unauthorized access since 2014.