The investigation into the large, multi-year data breach with hotel chain mogul Marriott has resulted in Colorado receiving a $822,434 settlement.

Colorado Attorney General Phil Weiser was one of many attorney generals in the country who launched an investigation into alleged data breaches in the last decade.

Marriott’s failure to comply with consumer protection and personal information protection laws resulted in a $52 million nationwide settlement, which Colorado received roughly 1.6% of, according to a news release.

The settlement derives from a criminal breach of Marriott’s Starwood guest reservation system. Millions of data breaches happened during a stretch between July 2014 and September 2018, undetected intruders gained access to customer data.

“The law makes it clear to companies that they have to implement reasonable cybersecurity safeguards,” Weiser said in the release.

And the breach wasn’t diagnosed until years after.

At the time, criminals had stolen 131.5 million guest records in the United States. Stolen information included contact information, passport numbers, unexpired credit cards, gender, dates of birth, legacy Starwood guest information, reservation information and hotel stay preferences.

“By failing to comply with the law, Marriott harmed those whose data was stolen,” said Weiser, one of the 50 attorney’s who launched the investigation on Marriott.

Nearly every attorney general in the country took part in the investigation, according to Weiser’s office.

Marriott’s settlement terms include stronger oversight and strengthening of its cybersecurity practices, improved employee training, better security training policies and regular third-party risk assessments.

With Colorado’s $822,434 settlement, “we are not only holding the company accountable for their failure to protect customers and follow the law, we are also requiring them to do a better job moving forward,” Weiser said.

That money can be used for any restitution where possible, according to the attorney general’s office.