Marriott data breach: what consumers can do to protect themselves