Multistate Reaches Settlement with Carnival over 2019 Data Breach
AGs from 46 states reached a $1.26 million settlement with Carnival Corporation and three of its subsidiaries (collectively “Carnival”) to resolve allegations that Carnival violated state consumer protection and personal information protection laws when deficiencies in its information security program contributed to a 2019 data breach that compromised the personal information of approximately 180,000 Carnival employees and customers.