ROYAL CARIBBEAN CRUISES LTD

Royal Caribbean Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-06-23. 241 Massachusetts residents were affected. The report records the breach type as electronic.

Royal Caribbean Cruises Ltd. reported that between February 6 and February 18, 2021, a third party gained unauthorized access to a limited number of employee email accounts. Affected data included names, contact info, dates of birth, government IDs (passports, driver's licenses), and tokenized payment card info. SSNs and full unencrypted payment cards were not involved. The company secured accounts, updated email access controls, and offered 24 months of credit monitoring to California residents.

Royal Caribbean Group notified NH AG of a phishing incident affecting 62 NH residents. Unauthorized access to employee email accounts occurred Feb 6-18, 2021; discovered Feb 12, 2021. Data included names, DOB, passport/license numbers, and partial payment info. Notices sent June 22, 2021. Incident contained; controls enhanced.

Royal Caribbean Group notified Montana residents that between Feb 6-18, 2021, unauthorized access to employee email accounts exposed personal data including names, DOB, passport numbers, and partial payment card info. The incident was contained in mid-February 2021.

Royal Caribbean Cruises Ltd reported a data breach to the Indiana Attorney General. The breach occurred on 2021-02-06 and was reported on 2021-06-22. 80 Indiana residents were affected.

Royal Caribbean Group notified Washington AG of a phishing attack affecting 502 Washington residents. Unauthorized access to employee email accounts occurred between Feb 6-18, 2021, discovered Feb 12, 2021. Data included names, DOB, government IDs, and partial payment card info. Notices sent June 22, 2021. Incident contained; credit monitoring offered.

Royal Caribbean Cruises LTD notified Montana residents of a data breach occurring between April 4, 2018, and September 13, 2018. A phishing attack compromised employee email accounts, potentially exposing customer PII including SSNs, driver's licenses, medical records, and financial data. The company discovered the incident on October 22, 2018, notified the FBI, updated email controls, and offered 12 months of credit monitoring.

Royal Caribbean Cruises Ltd. notified New Hampshire AG of a phishing attack on employee email accounts occurring between April 4 and September 13, 2018. Discovered Oct 22, 2018. Affected 3 NH residents with PII including SSN, medical info, and financial data. FBI notified. Credit monitoring offered.

Royal Caribbean Cruises Ltd reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-12-05. 20 Massachusetts residents were affected. The report records the breach type as electronic.