Vermont Joins National Settlement with Carnival Cruise Over 2019 Data Breach
Carnival Required to Change Its Security and Breach Practices
The Attorney General’s Office announced a multistate settlement with Florida-based Carnival Cruise Line stemming from a 2019 data breach that involved the personal information of approximately 180,000 Carnival employees and customers nationwide. As part of the settlement, Carnival must strengthen its email security and breach response practices. The company must also pay the states a total of $1.25 million, of which Vermont will receive $10,000.