More recently in November 2018, Marriott disclosed a data breach that affected 327 million customers, which in my opinion, was based on a false sense of security in encryption. Hackers had been hiding in Marriott's system since July 2014, gaining access to a whopping 25.6 million passport numbers in the breach, of which 5.25 million were unencrypted. While it seemed Marriott believed encryption would save the day, the technology was ultimately implemented incorrectly, leaving the organisation's endpoint security blindsided during the breach.