Marriott says hack affected guests