Cruise line operator Carnival Corporation & Carnival plc has announced that one of its brands suffered a ransomware attack that accessed and encrypted a portion of IT systems. The unauthorised access also included the download of certain data files.
In a statement, the company said that, based on a preliminary assessment and the information currently known, it expected that the security event included unauthorised access to personal data of guests and employees.
The firm has launched an investigation and notified law enforcement and other incident response professionals. While the investigation of the incident is ongoing, the company has implemented a series of containment and remediation measures to address the situation and reinforce the security of its systems.
The company added that it is working with industry-leading cybersecurity firms to immediately respond to the threat, defend its information technology systems and conduct remediation.
