Marriott says new data breach affects 5.2 million customers