Accept these two realities

Reality #1: Bad guys already have access to personal data points that you may believe should be secret but which nevertheless aren’t, including your credit card information, Social Security number, mother’s maiden name, date of birth, address, previous addresses, phone number, and yes — even your credit file.

Reality #2: Any data point you share with a company will in all likelihood eventually be hacked, lost, leaked, stolen or sold — usually through no fault of your own. And if you’re an American, it means (at least for the time being) your recourse to do anything about that when it does happen is limited or nil.

Read more here https://krebsonsecurity.com/2018/12/what-the-marriott-breach-says-about-security/

(including a few suggestions what you can/should do..)

I recommend reading all the comments, too.

It’s not pretty, folks.