Hotel group Marriott International Inc has been fined £18.4m after a large-scale data breach which went undetected for years, leaving millions of customers’ personal data at risk.