ShadowMap

Dark Web Exposure for marriott.com

Credentials, devices and data found in dark web stealer logs & breaches
98
Exposure level: Critical
marriott.com scores 98/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 20 days ago Last 90 days -5% 1% reuse a top-10 password
Employee exposure
corporate accounts — @marriott.com
17,044
leaked credentials · 775 compromised devices
Top exposed employee accounts
schultzeda***@marriott.com59
lynda.herskov***@marriott.com54
michele.tamba***@marriott.com51
bpey***@marriott.com50
jenistayet***@marriott.com48
Where staff accounts were caught
signin.ebay.com477
login.live.com417
www.amazon.com381
steamcommunity.com288
www.roblox.com283
Customer exposure
stolen logins for marriott.com
172,834
leaked credentials · 1,779 compromised devices
Top exposed customer accounts
viccampa***@yahoo.com37
dbell18832
hsbud69723
asmode***@gmail.com23
ravishverm***@gmail.com21
Most targeted services
www.marriott.com98,618
extranet.marriott.com11,211
www.espanol.marriott.com4,544
extranetcloud.marriott.com2,958
auth-apc.marriott.com2,429
189,807
Exposed Credentials
1,800
Compromised Devices
1
Credit Cards
27
Crypto Wallets
1,483
Auth Tokens
2,680,318
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Amazon/AWS499
Microsoft 365419
Oracle92
Box69

Most common passwords 1% reuse a top-10 password

Zh***91222
Ca***1$169
Kk***67167
Kj***08157
Ak***78152
Zi***!!148
Je***a1130
Di***69127
Pa***rd123
Lu***69118

Stolen sessions (active cookies that can bypass MFA)

youtube.com78,007
google.com44,525
bing.com30,868
pubmatic.com29,988
adnxs.com28,871
criteo.com21,208

Compromised despite antivirus (AV installed on infected devices)

Windows Defender48
AVG Antivirus3
Kaspersky Endpoint Security para Windows3
Avast Antivirus2
McAfee1

Financial, crypto & app tokens

Crypto wallets
metamask19
coinbase4
trust2
atomic1
ronin1
App / session tokens
Google1,359
Discord78
Telegram46

Where devices were compromised (by country)

US16
Mexico [MX]13
Colombia [CO]8
Peru [PE]8
Chile [CL]4
Top cities
Lima6
Asunción3
Concón2
Guadalajara2
Huancayo2

Browsers & apps affected

Edge [Default]173
Edge152
Microsoft Edge (Default)108
Google Chrome (Default)99
Chrome [Default]86
Google Chrome (Profile 1)36

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.