Data Protection Issue

Welcome to Cruise Critic! If you'd like to participate on our forums by joining in the conversation, please Register Now! Be sure to visit our FAMOUS Roll Call forums, where you can meet other cruisers sailing with you and share a tour or shore excursion and SAVE MONEY!


Unregistered, just back from your Cunard cruise? Get published on Cruise Critic; Write a Review!
Cunard Line

Read hundreds of Cunard Cruise Reviews from cruisers like you.

See posts about:
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
All times are GMT -4.
The time now is 07:24 AM.
#1
59 Posts
Joined Jun 2005
Hi,

I have received an email from Cunard with a spreadsheet file attached giving me the booking reference and names and email address of 1225 passengers. This information would allow me to see all the information such as address, contact number and passport information that you need to enter before your cruise. My name and number is on the list. A later email from Cunard asked me to disregard the email. Has anyone else had this email? Any thoughts as to whom to contact at Cunard?

DJ
#3
59 Posts
Joined Jun 2005
Having spoken to a lady at Cunard they are in the process of shutting down the Voyage Personalizers for all 1225 people. I assume people will be issued with new booking references as I have. It is about time the likes of cruise lines and airlines allowed one to set an additional password to supplement only needing the booking reference and person's name to access their details.

DJ.
#4
Iowa
1,119 Posts
Joined Mar 2010
Originally posted by davyjones
Having spoken to a lady at Cunard they are in the process of shutting down the Voyage Personalizers for all 1225 people. I assume people will be issued with new booking references as I have. It is about time the likes of cruise lines and airlines allowed one to set an additional password to supplement only needing the booking reference and person's name to access their details.

DJ.
Thanks for the heads-up, DJ.

It looks like they have shut down the Voyage Personaliser for everyone at the moment. I was logged in a few minutes ago. Now when I try to access the Voyage Personaliser it says:

!
The system is offline at the moment.
We are working to restore it.
Please try again later.
Expand Signature
Collapse Signature
"There’s nothing―absolutely nothing―half so much worth doing as messing about in boats." ― Kenneth Grahame, The Wind In The Willows

CroisiEurope Douce France, Rhine River (2004) ... Queen Mary 2, Transatlantic (2005, 2010, 2014, 2015, 2016) ... Queen Elizabeth 2, Norwegian Wonders (2008) ... Island Princess, Panama Canal (2008) ... Queen Victoria, Gallic Getaway (2009) ... Norwegian Epic, Eastern Caribbean (2010) ... Brilliance of the Seas, Suez Canal (2011) ... Queen Elizabeth, Eastern Mediterranean (2012) ... Maasdam, Canada and New England (2013) ... Queen Mary 2, Caribbean Fiesta (2013)


#6
UK
32 Posts
Joined Apr 2011
Ouch.

I'd drop a line to http://www.ico.gov.uk/complaints/data_protection.aspx as well
Expand Signature
Collapse Signature
Cruising -what's not to like?

2016 QE HK to HK; 2014 Celebrity Eclipse Med; 2014 Celebrity Constellation Wine Cruise; 2012 QV Baltics; 2011 QV Iberia; 2010 QV Around British Isles, Iberia; 2009 QM2 Transatlantic and 4th July Boston; 2008 QM2 Med; 2007 QM2 Norway
#7
East Lancashire
2,514 Posts
Joined Feb 2007
If you are in the UK I would report this to the Information Commissioners office. It's just unacceptable.
Expand Signature
Collapse Signature
QE2, 1991, 1994, 1996, 1997, 1998, 1999, 2000, 2001, 2004 (twice) 2005, 2006, 2007 (twice) and 2008 (twice). Caronia 2002 and 2003, QM2 2009, 2010 (twice), 2011, 2014 and 2015, QV 2009, 2011, 2012, 2013, 2014 and 2016, QE 2012 (twice), 2013 and 2015. Braemar 2015 (once was enough) Oriana 2017, Good but I still prefer Cunard.
#8
59 Posts
Joined Jun 2005
I have emailed several of the people on the list to see if they too received the email with the attachment.

On a slightly different note having so many booking ref numbers to look at at once one immediately sees they are not as random as one might think. The first two characters are all the same, the third has about 6 variations and the remaining three are random. It would not take too long to write a script to churn through the now not so many permutations together with a bunch of common fore and surnames and see if you get a match.
#9
Old York
5,646 Posts
Joined May 2007
Originally posted by davyjones
I have emailed several of the people on the list to see if they too received the email with the attachment.

On a slightly different note having so many booking ref numbers to look at at once one immediately sees they are not as random as one might think. The first two characters are all the same, the third has about 6 variations and the remaining three are random. It would not take too long to write a script to churn through the now not so many permutations together with a bunch of common fore and surnames and see if you get a match.
What would you do with the match once you had found it?

J
Expand Signature
Collapse Signature
#10
Ponte Vedra Beach, FL
2,238 Posts
Joined Feb 2005
I got this email as well. I am on the Nov. 20 W'bound crossing. I called Cunard and they said this was impossible. I had to reassure them that the document was right in front of me, and I can send it to them if they like, before they would get a supervisor. She said this was the first they had heard of it (I'm in the USA). She offered to rebook me, but in no way made it sound like they were automatically rebooking everybody. I had to call to initiate this.

I'm further dismayed that Cunard has not sent out an apology to all on the list for such a grievance. I feel like they completely do not understand the gravity of the situation. I actually had to ASK for an apology. Pitty.
Expand Signature
Collapse Signature
Rhapsody of the Seas -- 08/25/18 -- Greek Isles

Celebrity Solstice -- 09/22/17 -- Vancouver to Hawaii

Harmony of the Seas -- 05/13/17 -- Eastern Caribbean
Celebrity Reflection -- 02/20/16 -- Eastern Caribbean
Quantum of the Seas -- 11/23/14 -- Bahamas
Constellation -- 06/14/14 -- Norwegian Fjords/Arctic Circle
Norwegian Gem -- 4/4/14 -- Western Caribbean
Oasis of the Seas -- 11/23/13 -- Western Caribbean
Summit -- 07/21/13 -- Bermuda
Celebrity Silhouette -- 02/17/13 -- Eastern Caribbean

Queen Mary 2 -- 11/20/12 -- Westbound Crossing
Summit -- Bermuda -- 07/01/12
Infinity 'Round the Horn 01/29/12
Allure of the Seas 05/08/11 -- W Caribbean
HAL Veendam -- Bermuda -- 07/25/10
Azamara Quest 02/06/10 -- Hong Kong to Singapore
Solstice Caribbean 03/01/09
NCL Gem 01/03/09 NYC "One Night Only!"
Mercury Alaska 08/24/08
Victory 07/03/08 -- 4th of July in St. John, NB CANADA!
Millennium Med Cruise 10/07/07
Queen Mary 2 07/02/07 NYC to Bahamas
NCL Dawn 05/05/07 NYC "One Night Only!"
Century 01/04/07
Freedom of the Seas 10/15/06
Constellation 3/4/06
Serenade of the Seas 11/19/05
Enchantment of the Seas 7/7/05
Constellation 3/5/05


#11
Surrey UK
7,369 Posts
Joined Jun 2008
Originally posted by Cruachan
What would you do with the match once you had found it?

J
You could put it all on Wiki-Anorak
Expand Signature
Collapse Signature


E: [email protected]

I must go down to the seas again, to the vagrant gypsy life,
To the gull’s way and the whale’s way where the wind’s like a whetted knife;
And all I ask is a merry yarn from a laughing fellow-rover,
And quiet sleep and a sweet dream when the long trick’s over.

John Masefield


My blog can be found at http://thecapnpugwash.wordpress.com/

QE2 1 cruise 7 days
QM2 41 Transatlantics c263 days
QM2 5 cruises 38 days
QE 5 cruises 46 days
QV 6 cruises 74 days
P&O 8 cruises 135 days
Celebrity 1 cruise 12 days
RCIL 1 cruise 18 days
NCL 1 cruise 14 days
Fred Olsen 2 cruises 26 days
MSC 4 cruises 55 days
HAL 1 cruise 7 days

Future trips
#13
59 Posts
Joined Jun 2005
Originally posted by Cruachan
What would you do with the match once you had found it?

J
Nothing as I'm a good guy but someone who wasn't might have a trawl for QG bookings (as that's where the money is ), get their address and telephone number, ring up when they are away and if no answer pay a visit.

The script is relatively easy to write. I use a similar idea to do pretend bookings so I can get back the detailed cabin prices and then send myself an email when they change. You would be surprised how often cabin grades switch between showing no availability and available. I suppose this is the time the upgrade fairy is on duty freeing up the cheaper cabins.
#14
Pt Charlotte,FL USA
4,318 Posts
Joined Aug 2002
Originally posted by darrencantwait
I got this email as well. I am on the Nov. 20 W'bound crossing. I called Cunard and they said this was impossible. I had to reassure them that the document was right in front of me, and I can send it to them if they like, before they would get a supervisor. She said this was the first they had heard of it (I'm in the USA). She offered to rebook me, but in no way made it sound like they were automatically rebooking everybody. I had to call to initiate this.

I'm further dismayed that Cunard has not sent out an apology to all on the list for such a grievance. I feel like they completely do not understand the gravity of the situation. I actually had to ASK for an apology. Pitty.
Very upsetting, and not at all smart of the supervisor to say "that is impossible" !!!!! As though you would call if it were not so.

To quote an English saying "Some mothers do have them".
#15
Ponte Vedra Beach, FL
2,238 Posts
Joined Feb 2005
my concern is that this is a pretty tasty list that a lot of marketers would pay money for. I don't need any more email. In the end, it's a convenience for than a serious data security issue. But, it's not a great indicator of how Cunard/Carnival Corp treats their data privacy.
Expand Signature
Collapse Signature
Rhapsody of the Seas -- 08/25/18 -- Greek Isles

Celebrity Solstice -- 09/22/17 -- Vancouver to Hawaii

Harmony of the Seas -- 05/13/17 -- Eastern Caribbean
Celebrity Reflection -- 02/20/16 -- Eastern Caribbean
Quantum of the Seas -- 11/23/14 -- Bahamas
Constellation -- 06/14/14 -- Norwegian Fjords/Arctic Circle
Norwegian Gem -- 4/4/14 -- Western Caribbean
Oasis of the Seas -- 11/23/13 -- Western Caribbean
Summit -- 07/21/13 -- Bermuda
Celebrity Silhouette -- 02/17/13 -- Eastern Caribbean

Queen Mary 2 -- 11/20/12 -- Westbound Crossing
Summit -- Bermuda -- 07/01/12
Infinity 'Round the Horn 01/29/12
Allure of the Seas 05/08/11 -- W Caribbean
HAL Veendam -- Bermuda -- 07/25/10
Azamara Quest 02/06/10 -- Hong Kong to Singapore
Solstice Caribbean 03/01/09
NCL Gem 01/03/09 NYC "One Night Only!"
Mercury Alaska 08/24/08
Victory 07/03/08 -- 4th of July in St. John, NB CANADA!
Millennium Med Cruise 10/07/07
Queen Mary 2 07/02/07 NYC to Bahamas
NCL Dawn 05/05/07 NYC "One Night Only!"
Century 01/04/07
Freedom of the Seas 10/15/06
Constellation 3/4/06
Serenade of the Seas 11/19/05
Enchantment of the Seas 7/7/05
Constellation 3/5/05


#16
Pennsylvania
5,272 Posts
Joined Jul 2010
Nothing like 1200+ but before our Oct TA we got a notification email about some trivial thing and it included the names and booking numbers of two other sets of passengers. I ignored it, but I guess I could have signed the others up for shore excursions or something.
Expand Signature
Collapse Signature


Past:
Queen Mary 2: 7 cruises
Queen Victoria: 2 cruises
Caribbean Princess: 1 cruise
Carnival Pride: 1 cruise
#17
USA
9,307 Posts
Joined Apr 2010
Originally posted by ToadOfToadHall
Now that is "dropping a cod" !
Ut-OH. that's bad.
Worse than dropping a flounder, or a trout even.

OP, thank you for the alert. I don't fancy having my passport number compromised (or any of the information I supplied on -line while booking a cruise or voyage.)
#18
USA
9,307 Posts
Joined Apr 2010
Originally posted by Cruachan
I hope nobody cancels my shore excursions!



J
Shore excursions are not SURE excusions.
read the fine print
#19
USA
9,307 Posts
Joined Apr 2010
Originally posted by darrencantwait
my concern is that this is a pretty tasty list that a lot of marketers would pay money for. I don't need any more email. In the end, it's a convenience for than a serious data security issue. But, it's not a great indicator of how Cunard/Carnival Corp treats their data privacy.
I don't understand your comment: "it's a convenience for than a serious data security issue". To whom would it be a convenience?
#20
USA
9,307 Posts
Joined Apr 2010
Originally posted by Underwatr
Nothing like 1200+ but before our Oct TA we got a notification email about some trivial thing and it included the names and booking numbers of two other sets of passengers. I ignored it, but I guess I could have signed the others up for shore excursions or something.
With a name and booking number, there are many things one could do, and far less beign than being signed up for shore excursions or something. You didn't ask, and I would not even if you had asked about what could do with a name and booking number. I' sure you could figure it out by yourself anyway.

I have great respect for the security team on board QM2, but the IT people have dropped the ball (or the cod, or whatever you want to call a serious breach of security).



As much as I enjoy a good laugh, is this security breach really funny?