Customers Win Class Certification in Marriott Data Breach Suit

Consumers alleging that Marriott International Inc. and its IT vendor Accenture LLP failed to protect their personal information that was exposed in a cyberattack over a four-year period can bring their claims as a class action, a federal court ruled.

Marriott waived a provision of the terms of service agreed to by customers that purported to bar the certification of a class action, Judge John P. Bailey of the US District Court for the District of Maryland said Wednesday.

Bailey also said he had reservations as to the validity of the class action waiver even if Marriott hadn’t waived the ...