- Company issues update to its August 17 announcement

As earlier disclosed, Carnival Corporation & plc ( 
https://c212.net/c/link/?t=0&l=en&o=2947969-1&h=1782053100&u=https%3A%2F%2Fc212.net%2Fc%2Flink%2F%3Ft%3D0%26l%3Den%26o%3D2756345-1%26h%3D899401790%26u%3Dhttps%253A%252F%252Fwww.carnivalcorp.com%252F%26a%3DCarnival%2BCorporation&a=Carnival+Corporation+%26+plc 
) (NYSE/LSE: CCL; NYSE: CUK) detected unauthorized third-party access to 
portions of the company's information technology systems on August 15, 2020. 
Information Security at Carnival Corporation acted quickly to shut down the 
intrusion, restore operations and prevent further unauthorized access. The 
company also engaged a major cybersecurity firm to investigate the matter and 
notified law enforcement and appropriate regulators of the event. 

While the investigation is ongoing, early indications are that in early August 
the unauthorized third party gained access to certain personal information 
relating to some guests, employees and crew for three of the corporation's 
brands -- Carnival Cruise Line, Holland America Line and Seabourn, as well as 
casino operations. Working with its cybersecurity consultants, the company took 
steps to recover its files and has evidence indicating a low likelihood of the 
data being misused. 

The company is working as quickly as possible to identify the guests, 
employees, crew and other individuals whose personal information may have been 
impacted. The company expects to complete this process within the next 30 to 60 
days and will then send notifications to potentially affected individuals whose 
current contact information is available to the company. Along with those 
individual notices, affected individuals will be offered complimentary credit 
monitoring, as appropriate. 

Meanwhile, the company has posted website notices and established a dedicated 
call center to answer questions regarding the event. When the investigation is 
complete, callers may confirm whether or not their information was affected. 

Additional information about the event is available at www.hollandamerica.com, 
www.carnival.com, www.seabourn.com, or www.oceanplayersclub.com. The call 
center is available toll-free in the U.S. at +1. 888.905.0687, 9 a.m. to 9 p.m. 
Eastern Time (ET), Monday through Friday. Individuals outside the U.S. may 
email questions to cruisedataevent@cyberscout.com, as well as request that a 
call center representative respond back by phone. 

As part of its ongoing operations, the company is continuing to review security 
and privacy policies and procedures and implementing changes when needed to 
enhance information security and privacy controls.  

About Carnival Corporation & plc
Carnival Corporation & plc is one of the world's largest leisure travel 
companies with a portfolio of nine of the world's leading cruise lines. With 
operations in North America, Australia, Europe and Asia, its portfolio features 
Carnival Cruise Line, Princess Cruises, Holland America Line, Seabourn, P&O 
Cruises (Australia), Costa Cruises, AIDA Cruises, P&O Cruises (UK) and Cunard.

SOURCE  Carnival Corporation & plc 

CONTACT: Roger Frizzell, Carnival Corporation, rfrizzell@carnival.com, +1 (305) 
406-7862, Mike Flanagan, LDWW, mike@ldww.co, +1 (727) 452-4538