Carnival Corporation Ltd.

Carnival Corporation and plc notified the Delaware Attorney General of a cybersecurity incident occurring between April 11 and July 23, 2019. The company identified suspicious activity on May 31, 2019, leading to an investigation that revealed unauthorized access by an unsanctioned third party. The breach affected approximately 6 million individuals nationwide, including roughly 10,000 Delaware residents. Affected data included names, addresses, phone numbers, email addresses, and, for some, Social Security numbers and credit card information. Carnival engaged forensic experts and offered complimentary credit monitoring.