Company email, but my data?
Guess I'll have to give them a call in the morning...stayed at Marriott/Starwoods on many occasions over the last 10 years mainly on business ( no nieces involved!!) however it would always be using my at that time business email address, however the passport, address would be my own obviously and card details (sometimes my own if no company cc).
I would hope they can identify those affected on more than just their email address