HackingOtherStolen CredentialsTargetedIdentity (basic)LowContained

Azamara Cruises

bd_7c9ee721b9a74b68 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 19, 2024

Filed

Feb 25, 2025

To disclose

27 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Azamara Cruises →

SP Cruises Opco Limited (doing business as Azamara Cruises) notified consumers of a data breach involving unauthorized access to a single email account. The incident occurred between August 16 and August 19, 2024. The unauthorized actor may have downloaded email contents containing names and other personal information. The company secured the account, launched an investigation, and is offering complimentary credit monitoring and identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday27 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 3 days

discovery → filing · 27 weeks / 190 days

Aug 16, 2024

Begins

Aug 19, 2024

Discovered

Feb 25, 2025

Filed

vs. sector median

+19 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: SP Cruises Opco Limited
norm: sp cruises opco
Domain: azamara.com

Name: Azamara Cruises
norm: azamara cruises
Industry: Otherllm

Discovered: Aug 19, 2024
Breach occurred: Aug 16, 2024 – Aug 19, 2024
Undetected for: 3 daysoccurrence → discovery
Materiality determined: Feb 25, 2025
Notification sent: Feb 25, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took prompt steps to secure the account
Commenced an investigation to determine the nature and scope of any unauthorized activity
Took steps to implement additional safeguards
Reviewing our policies and procedures relating to data privacy and security
Offering you immediate access to credit monitoring and identity theft protection services for [Extra2] months at no cost to you, through Experian
Changes made: Implement additional safeguards
Reviewing our policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(190 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-02-25-sp-cruises-opco-limited-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 25, 2025
Raw hash: 463cd3962996126c3c9a8e7f03961f5cc34d46e81968b2cd0ec75b153bab1f5e

Reporting entitySP Cruises Opco Limited

Victim entityAzamara Cruises

Incidentdiscovered Aug 19, 2024

Stated responseTook prompt steps to secure the account

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov