Client and staff data stolen in Carnival Corp. IT attack
Carnival Corporation has launched an investigation into a ransomware attack on one of its brand’s information technology systems.
The attack, first detected on Saturday, 15 August, included unauthorised access to personal data of guests and employees.
The company did not identify the brand that was affected and did not provide any further details, saying the investigation is at an early stage.
Carnival operates several cruise lines including Carnival, Cunard, Princess, P&O Cruises, Costa Cruises, Holland America Line and Seabourn.
It’s the second time in five months that Carnival has revealed a data breach, following a disclosure in March that both Holland America Line and Princess Cruises had been hacked over a three-month period from April 2019.
In the latest attack, certain data files were downloaded, Carnival said, adding that it expected this ‘included unauthorised access to personal data of guests and employees’. It said there was no assurance that information technology systems of its other brands will not be adversely affected.
Ransomware is a type of malicious program used by hackers to seize control of files in an infected system and then demand hefty payments to recover them.
The company said it believed the incident will not have a material impact on its business, operations or financial results, however, it said it might result in claims from guests, employees, shareholders or regulatory agencies.
Carnival said it has ‘reinforced’ the security its IT systems and it is working with cyber security firms to respond to the threat.
By Linsey McNeill, Editor (UK)
Dozens fall ill in P&O Cruises ship outbreak
Turkish Airlines flight in emergency landing after pilot dies
Boy falls to death on cruise ship
Unexpected wave rocks cruise ship
Storm Lilian travel chaos as bank holiday flights cancelled