Hackers target the world’s biggest cruise operator with ransomware

The P&O parent company says it expects that cyber criminals accessed the personal data of guests and employees

Hackers have targeted the world’s largest cruise lining company with ransomware, encrypting data from the firm that organises cruises under nine major brands including P&O and Princess Cruises.

Carnival Corporation & PLC has confirmed that hackers accessed a portion of one of its brand’s IT systems and downloaded some data files, according to a filing with the US Securities and Exchange Commission (SEC)

The cruise operator detected the attack on 15 August and took measures to secure its systems. The firm said it expects the security incident included unauthorised access to the personal data of both guests and employees, which may prompt action from guests, employees, shareholders, and regulators.

“Promptly upon its detection of the security event, the Company launched an investigation and notified law enforcement, and engaged legal counsel and other incident response professionals,” the filing said. 

“While the investigation of the incident is ongoing, the Company has implemented a series of containment and remediation measures to address this situation and reinforce the security of its information technology systems.”

Despite targeting the company’s IT systems, Carnival Corporation doesn’t feel the incident will have a material impact on its business, operations or financial results. The news was revealed in an 8-K form, which is submitted when a company experiences an unscheduled event that could be key to shareholders, or the SEC.

This is the second major security incident that Carnival Corporation has disclosed this year, after two units disclosed in March that it was targeted by cyber criminals during May 2019. Holland America Line and Princess Cruises.

An investigation conducted by both units revealed unauthorised access to personal information, including names, social security numbers and the credit card information of some guests and employees, according to Reuters.

The units, which account for 30% of Carnival Corporation’s capacity as of 30 November, said they acted to shut down the attack quickly and prevent further access to data.

Featured Resources

The ultimate law enforcement agency guide to going mobile

Best practices for implementing a mobile device program

Free download

The business value of Red Hat OpenShift

Platform cost savings, ROI, and the challenges and opportunities of Red Hat OpenShift

Free download

Managing security and risk across the IT supply chain: A practical approach

Best practices for IT supply chain security

Free download

Digital remote monitoring and dispatch services’ impact on edge computing and data centres

Seven trends redefining remote monitoring and field service dispatch service requirements

Free download

Recommended

Best ransomware removal tools
ransomware

Best ransomware removal tools

14 Oct 2021
Senator to introduce new bill to force ransomware payment disclosures
ransomware

Senator to introduce new bill to force ransomware payment disclosures

6 Oct 2021
Two-thirds of organizations have fallen victim to ransomware
ransomware

Two-thirds of organizations have fallen victim to ransomware

29 Sep 2021
Researchers disclose top flaws abused by ransomware gangs
ransomware

Researchers disclose top flaws abused by ransomware gangs

20 Sep 2021

Most Popular

Best Linux distros 2021
operating systems

Best Linux distros 2021

11 Oct 2021
HPE wins networking contract with Birmingham 2022 Commonwealth Games
Network & Internet

HPE wins networking contract with Birmingham 2022 Commonwealth Games

15 Oct 2021
Veritas Backup Exec 21.3 review: Covers every angle
backup software

Veritas Backup Exec 21.3 review: Covers every angle

14 Oct 2021