Threat actors used targeted social engineering techniques to trick a franchise associate at a single Marriott property into surrendering network access credentials. The intruders exfiltrated 20 gigabytes of internal corporate files, including guest reservation schedules and internal credit card documentation.