The unusually long dwell time in the Starwood breach has implications for both parent company Marriott International and the companies watching to learn from.