Carnival Corporation and plc reported unauthorized third-party access to IT systems in August 2020. The breach impacted guests, employees, and crew, potentially exposing names, addresses, passport numbers, DOBs, and possibly SSNs and health info. The company engaged cybersecurity investigators, notified law enforcement, and offered credit monitoring. Investigation was ongoing at the time of the October 2020 substitute notice.