New York’s financial services regulator has fined Carnival Corp. $5 million for violations of the state’s cybersecurity regulations that the state says caused four cyber breaches and the exposure of personal data belonging to its customers, including New York consumers. The company has also surrendered its travel insurance licenses, according to the consent order.
The Department of Financial Services said its investigation uncovered evidence that the Carnival companies had been the subject of four cybersecurity events between 2019 and 2021, including two ransomware attacks.
