Carnival Corporation & plc Update on Cyber Event
Carnival Corporation (NYSE: CCL; NYSE: CUK) updated its previous announcement regarding a cybersecurity incident. On August 15, 2020, unauthorized third-party access was detected in its IT systems. Affected brands include Carnival Cruise Line, Holland America Line, and Seabourn. Following the incident, Carnival engaged a cybersecurity firm for investigation and notified law enforcement. Personal information of some guests, employees, and crew may have been compromised, but evidence indicates a low likelihood of misuse. Notifications will be sent to those impacted within 30 to 60 days with offers for credit monitoring.
- Rapid response to cybersecurity incident mitigated further damage and restored operations.
- Engagement of a major cybersecurity firm indicates a proactive approach to investigation.
- Unauthorized access to personal information may damage reputation and trust.
- Potential costs associated with credit monitoring for affected individuals.
Company issues update to its August 17 announcement
MIAMI, Oct. 13, 2020 /PRNewswire/ -- As earlier disclosed, Carnival Corporation & plc (NYSE/LSE: CCL; NYSE: CUK) detected unauthorized third-party access to portions of the company's information technology systems on August 15, 2020. Information Security at Carnival Corporation acted quickly to shut down the intrusion, restore operations and prevent further unauthorized access. The company also engaged a major cybersecurity firm to investigate the matter and notified law enforcement and appropriate regulators of the event.
While the investigation is ongoing, early indications are that in early August the unauthorized third party gained access to certain personal information relating to some guests, employees and crew for three of the corporation's brands -- Carnival Cruise Line, Holland America Line and Seabourn, as well as casino operations. Working with its cybersecurity consultants, the company took steps to recover its files and has evidence indicating a low likelihood of the data being misused.
The company is working as quickly as possible to identify the guests, employees, crew and other individuals whose personal information may have been impacted. The company expects to complete this process within the next 30 to 60 days and will then send notifications to potentially affected individuals whose current contact information is available to the company. Along with those individual notices, affected individuals will be offered complimentary credit monitoring, as appropriate.
Meanwhile, the company has posted website notices and established a dedicated call center to answer questions regarding the event. When the investigation is complete, callers may confirm whether or not their information was affected.
Additional information about the event is available at www.hollandamerica.com, www.carnival.com, www.seabourn.com, or www.oceanplayersclub.com. The call center is available toll-free in the U.S. at +1. 888.905.0687, 9 a.m. to 9 p.m. Eastern Time (ET), Monday through Friday. Individuals outside the U.S. may email questions to cruisedataevent@cyberscout.com, as well as request that a call center representative respond back by phone.
As part of its ongoing operations, the company is continuing to review security and privacy policies and procedures and implementing changes when needed to enhance information security and privacy controls.
About Carnival Corporation & plc
Carnival Corporation & plc is one of the world's largest leisure travel companies with a portfolio of nine of the world's leading cruise lines. With operations in North America, Australia, Europe and Asia, its portfolio features Carnival Cruise Line, Princess Cruises, Holland America Line, Seabourn, P&O Cruises (Australia), Costa Cruises, AIDA Cruises, P&O Cruises (UK) and Cunard.
View original content:http://www.prnewswire.com/news-releases/carnival-corporation--plc-update-on-cyber-event-301151284.html
SOURCE Carnival Corporation & plc
FAQ
What happened with Carnival Corporation's cybersecurity incident?
What brands were affected by the cybersecurity breach at CCL?
What steps is Carnival Corporation taking after the cyber event?
How will Carnival address the cybersecurity incident for affected individuals?
What is the stock impact of the cybersecurity incident on CCL and CUK?
