Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.
Carnival Cruise Line data breach settlement overview:
- Who: Carnival Cruise Line agreed to a $1.25 million settlement with 45 different different states, including Alabama, Maryland, Oregon and New York.
- Why: The settlement resolves claims that Carnival waited too long to inform the public about a 2019 data breach.
- Where: Carnival made the settlement with 45 states across the nation.
Carnival Cruise Line has agreed to pay $1.25 million in a multistate settlement made to resolve claims the company took too long to notify the public about a 2019 data breach.
Carnival was accused of waiting 10 months to notify the public after it first became suspicious that a breach may have occurred, WMAR 2 News reports.
The data breach reportedly exposed the personal information — including names, driver’s license numbers, passport numbers and addresses, among other things — of around 180,000 Carnival employees and customers nationwide.
Under the terms of the deal, Carnival will be required to strengthen its data security protection and notification protocols, including mandated email security training, WMAR 2 News reports.
Maryland Attorney General Brian E. Frosh announced the settlement and released a statement yesterday declaring consumers must be notified of a data breach “as soon as possible.”
“Businesses must quickly identify the personal information they have stockpiled and promptly notify consumers if a breach occurs. Delayed notification of data breaches increases the risk to consumers,” Frosh says in the statement.
Carnival settlement includes ‘independent information security assessment’
Carnival will also be required to undergo an independent information security assessment of its data protection practices per the settlement agreement, Nottingham MD reports.
Last June, the company informed its employees and customers in a letter that they may have had their personal information exposed in a data breach that occurred in March 2021.
Customers who cruised on its Carnival Cruise, Holland America and Princess Cruise lines were told they may have been affected by the data breach, according to the letter.
The company reassured customers and staff at that time that it had evidence to indicate that there was a “low likelihood” any of their data would end up being misused.
Have you or a loved one traveled on a Carnival cruise and had your/their personal information exposed in a data breach? Let us know in the comments.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
47 thoughts onCarnival Cruise Line reaches $1.25M settlement with 45 states
Still have cruise cards
Add me I crushed them too