Marriott announces data breach that may impact up to 500 million people