The cruise company said outsiders may have access to their Social Security and passport numbers, date of birth, address, and health information.
Carnival Corporation said Thursday that a data breach in March could have leaked personal information about Carnival Cruise Line, Holland America Line and Princess Cruises customers and employees.
In a letter to the customer, the company indicated that outsiders may have access to social security numbers, passport numbers, dates of birth, addresses, and people’s health information.
The company did not disclose how many people’s information was released.
This breach occurs after the carnival was hit by two ransomware attacks last year.
Carnival spokesman Roger Frizzell said the company detected the latest intrusions into some information technology systems on March 19, shutting down access and hiring a cybersecurity company to investigate. He said the carnival is making changes to improve the security of information systems.
According to Fritzell, the company has set up a call center to notify affected people and answer their questions.
The Miami-based company revealed at a securities filing in April that hackers broke into the system in August and December last year.
An attacker encrypted part of a cruise line IT system to gain access to personal information about customers and employees. Carnival said there were no signs of misuse of personal information disclosed in these attacks. The company did not indicate whether it paid the ransom.
Carnival shares fell 3% on Thursday.
Carnival data breaches can leak passengers’ personal information
Source link Carnival data breaches can leak passengers’ personal information