HackingHospitalityHospitalityCustomer Data InvolvedLowContained

Carnival Corporation Ltd.

bd_c249343bcb91747d · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 29, 2020

Filed

Oct 16, 2020

To disclose

17 days

Affected

8scope not determined

Linked

11 filings

Confidence

50%

Full breach record for Carnival Corporation Ltd. →6 incidents on file

Carnival Corporation and plc reported a data breach affecting approximately 37,500 individuals, including 8 Maine residents. The breach, described as an external system breach (hacking), occurred on August 4, 2020, and was discovered on September 29, 2020. The company began notifying affected individuals on October 13, 2020, and will offer complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 29, 2020 → Filed with AG Oct 16, 202017d ✓ ME AG ≤30d17 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 56 days

discovery → filing · 17 days

Aug 4, 2020

Begins

Sep 29, 2020

Discovered

Oct 16, 2020

Filed

This filing is one of 11 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Oregon State AGbd_793b80455e0891bd2020-10-16Verified
Massachusetts State AGbd_e40607437aac5a3d2020-10-18 · +2dVerified
Indiana State AGbd_3e8eae6632241b152020-10-13 · +3dVerified
California State AGbd_d87c41df3edad4b32020-10-13 · +3dVerified

Show 6 more filings ↓up to 414d gap

Delaware State AGbd_f98a16396915c9b32020-10-13 · +3dVerified
New Hampshire State AGbd_4e0ccec4f7c6c50c2020-10-20 · +4dVerified
South Carolina State AGbd_d7516eeb9dc1ce1f2020-10-20 · +4dVerified
California State AGbd_1c52d20f405628ca2021-02-04 · +111dVerified
Illinois State AGbd_e101d74749d2c0772020-01-01 · +289dCandidate
Delaware State AGbd_1c3ab84ff5393d162021-12-04 · +414dVerified

Name: Carnival Corporation Ltd.
norm: carnival
Domain: carnivalcorp.com

Name: Carnival Corporation Ltd.
norm: carnival
Domain: carnivalcorp.com
Industry: Hospitalityllm

Discovered: Sep 29, 2020
Breach occurred: Aug 4, 2020
Undetected for: 56 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 13, 2020
Affected individuals: 8scope not determined
Data types: —
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered complimentary credit monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 days(17 days from discovery to filing)
Compliance flags: ME AG ≤30d · 17d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 29, 2020
→ Filed with AG: Oct 16, 2020
17d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 29, 2020 → Filed with AG: Oct 16, 2020	17d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+286d

California State AG+286d

Delaware State AG+286d

Oregon State AG+289d

Maine State AG+289d · this page

Massachusetts State AG+291d

New Hampshire State AG+293d

South Carolina State AG+293d

California State AG+400d

Delaware State AG+703d

Pattern: first filing Jan 1 (IL), last Dec 4 (DE) — a 703-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7959502f-a67a-43a4-a16e-f4e24cc96ae8.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2020
Raw hash: 138f01378a66c0cf15803ce49f0ba1fd584ff355d7b35f1ce8afd6987bc7dbda

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityCarnival Corporation Ltd.

Victim entityCarnival Corporation Ltd.

Incidentdiscovered Sep 29, 2020

Stated responseOffered complimentary credit monitoring

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov