Fourth Circuit Rules Omission of Marriott’s Data Vulnerabilities Not Actionable Because Challenged Statements Were Not False When Made

In dismissing a complaint against Marriott for the breach of its Starwood division's reservation system, the Fourth Circuit pointed to SEC guidance on “less is more” approach to cybersecurity disclosures, while finding such disclosures did not violate federal securities laws.