story, which is how hackers can use this information to then individually target folks for spear phishing emailsbsequent operations down the line. its not just a compromise of a single identifier, obviously, the deterioration of unique identifiers, such as the social security number and passport numbers is a problem, but its piecing together multiple identities. >> what does it tell you, dave, that this went on for four years? 48 months either without marriott knowing or without marriott doing anything. >> it tells you that you have a pretty sophisticated actor here and its unclear at this point if this activity is linked as kate said to the activity that was reported before the merger involving just starwood. so more details will likely emerge, but persistence is a major indicator of sophistication, right? most of the time when we talk about advanced persistent threats we're talking about nation states but given the types of data that were caught up -- >> this data could be on the darkweb right now up for sale for all we know. kate, when analysts come out and say the impact on the company is ma