Carnival Corporation & PLC

In August 2020, Carnival Corp., a Miami-based cruise operator, fell victim to a **ransomware attack** targeting one of its brand’s IT systems. The attackers partially encrypted critical data files, exposing the company to potential legal and financial repercussions. The breach raised concerns over compromised guest, employee, and shareholder data, alongside regulatory scrutiny. This incident marked Carnival Corp.’s **second cyber-attack**, amplifying risks to its operational integrity, customer trust, and financial stability. While the full scope of data exposure (e.g., personal or financial records) was not explicitly detailed, the attack’s disruptive potential—including operational disruptions, reputational damage, and liability claims—positioned it as a high-stakes security failure with broad organizational consequences.

Source: |

TPRM report: https://www.rankiteo.com/company/carnival-corporation

"id": "car659092025",
"linkid": "carnival-corporation",
"type": "Ransomware",
"date": "8/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'travel/leisure (cruise line)',
                        'location': 'Miami, USA',
                        'name': 'Carnival Corporation',
                        'type': 'corporation'}],
 'data_breach': {'data_encryption': True},
 'date_detected': '2020-08',
 'description': 'In August 2020, Miami (USA) based Carnival Corp. experienced '
                'a ransomware attack on their network. The hackers used the '
                "ransomware to attack one of the brands' IT systems and partly "
                'encrypt certain data files. As a result of this attack, there '
                'can be potential claims from guests, employees, shareholders, '
                'or regulatory agencies. This has been the second cyber-attack '
                'on Carnival Corp.',
 'impact': {'brand_reputation_impact': True,
            'data_compromised': True,
            'legal_liabilities': True,
            'systems_affected': True},
 'ransomware': {'data_encryption': True},
 'title': 'Ransomware Attack on Carnival Corporation',
 'type': 'ransomware'}