Holland America Line

Holland America Line had a data breach which compromised employee and guest personal information.

In late May 2019, a series of deceptive emails were sent to employees that resulted in unauthorized third-party access to some employee email accounts.

Holland America Line was shut down to prevent further unauthorized access.

The unauthorized third-party access compromsed certain email accounts containing employee and guest personal information, including names, Social Security numbers, government identification numbers, such as passport numbers, national identity card numbers, credit card, and financial account information, and health-related information.

Source: https://www.travelagentcentral.com/cruises/data-breach-affects-princess-cruises-holland-america-line-guests

TPRM report: https://scoringcyber.rankiteo.com/company/holland-america-line

"id": "hol2320221222",
"linkid": "holland-america-line",
"type": "Breach",
"date": "03/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Travel and Tourism',
                        'name': 'Holland America Line',
                        'type': 'Company'}],
 'attack_vector': 'Phishing',
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal information',
                                              'Financial information',
                                              'Health information']},
 'date_detected': 'May 2019',
 'description': 'Holland America Line experienced a data breach in May 2019 '
                'where unauthorized third-party access to employee email '
                'accounts compromised personal information of employees and '
                'guests.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 'Government identification numbers',
                                 'Passport numbers',
                                 'National identity card numbers',
                                 'Credit card information',
                                 'Financial account information',
                                 'Health-related information'],
            'systems_affected': 'Email accounts'},
 'initial_access_broker': {'entry_point': 'Phishing emails'},
 'post_incident_analysis': {'root_causes': 'Deceptive emails leading to '
                                           'unauthorized access'},
 'response': {'containment_measures': 'Holland America Line was shut down to '
                                      'prevent further unauthorized access.'},
 'title': 'Holland America Line Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human'}