

This came after Carnival revealed in an SEC filing in August that one its brands fell victim to a ransomware attack which accessed and encrypted its IT systems on August 15. In the filing, the company said it had 'detected ransomware attacks in August and December 2020.įor the latter, the company said there was 'no indication of any misuse of information potentially accessed or acquired.'Īt the time, Carnival and subsidiaries AIDA Cruises and Costa Crociere all reported IT issues. The December breach only came to light in a US Securities and Exchange Commission filing in April, reported. This marks the fourth cybersecurity breach to strike the cruise operator in just 18 months following other hacks in March, August and December 2020. The cruise giant, which spent much of the last year crippled by the effects of the pandemic, fell victim to a data breach back in March it revealed in a letter to impacted customers 'The impacted information includes data routinely collected during the guest experience and travel booking process or through the course of employment or providing services to the Company, including COVID or other safety testing. 'It appears that in mid-March, the unauthorized third-party gained access to certain personal information relating to some of our guests, employees, and crew,' it read. In it, the world's biggest cruise ship operator revealed an unauthorized third party had gained access to 'a limited number' of email accounts. The breach was first revealed by tech site which obtained the letter sent out to impacted customers. Carnival Cruise Line's Mardi Gras ship in Port Canaveral in JuneĬompany spokesperson Roger Frizzell said all guests, employees, crew and other individuals whose personal information may have been impacted had been notified and a dedicated helpline had been set up to support any concerns. It is not clear how many customers or employees were impacted by the breach.Ĭarnival Corp has been hit by hackers who gained access to personal and health information of guests, employees and crew members, marking the fourth data breach in the last year for the cruise line. Such information included: passport numbers, dates of birth, addresses, health information, names, phone numbers, social security and national insurance numbers. Hackers were able to gain access to highly personal and sensitive information of guests, employees and crew members across its Carnival Cruise Line, Holland America Line, Princess Cruises and medical operations.

The attack came to light on March 19 when the company said it 'detected unauthorized third-party access to limited portions of its information technology systems'.

The cruise giant, which spent much of the last year crippled by the effects of the pandemic, confirmed to Thursday it fell victim to a data breach back in March.

Published: 20:33 BST, 17 June 2021 | Updated: 21:12 BST, 17 June 2021Ĭarnival Cruise lines has been hit by hackers who gained access to personal and health information of guests, employees and crew members, marking the fourth data breach in 18 months for the beleaguered cruise line.
