Go Back   Cruise Critic Message Board Forums > Cruise Lines "A - O" > Cunard Line
 
Register here!
Forgot Your Password?


Notices

Cunard Line
Read hundreds of Cunard Cruise Reviews from real cruisers and compare the best Cunard Cruise Deals.

Reply
 
Thread Tools Display Modes
  #1  
Old June 23rd, 2012, 11:10 AM
davyjones davyjones is offline
Cool Cruiser
 
Join Date: Jun 2005
Posts: 40
Default Data Protection Issue

Hi,

I have received an email from Cunard with a spreadsheet file attached giving me the booking reference and names and email address of 1225 passengers. This information would allow me to see all the information such as address, contact number and passport information that you need to enter before your cruise. My name and number is on the list. A later email from Cunard asked me to disregard the email. Has anyone else had this email? Any thoughts as to whom to contact at Cunard?

DJ
Reply With Quote

  #2  
Old June 23rd, 2012, 11:18 AM
ocngypz ocngypz is offline
Charter Member - 5,000+ Club
 
Join Date: Mar 2000
Posts: 4,575
Default

OMG!!!!!!!!

Obviously sent in error. I would call 1-800-5-CUNARD.
__________________
Babette
Reply With Quote

  #3  
Old June 23rd, 2012, 12:16 PM
davyjones davyjones is offline
Cool Cruiser
 
Join Date: Jun 2005
Posts: 40
Default

Having spoken to a lady at Cunard they are in the process of shutting down the Voyage Personalizers for all 1225 people. I assume people will be issued with new booking references as I have. It is about time the likes of cruise lines and airlines allowed one to set an additional password to supplement only needing the booking reference and person's name to access their details.

DJ.
Reply With Quote

  #4  
Old June 23rd, 2012, 12:41 PM
bluemarble's Avatar
bluemarble bluemarble is offline
Cool Cruiser
 
Join Date: Mar 2010
Location: Iowa
Posts: 817
Default

Quote:
Originally Posted by davyjones View Post
Having spoken to a lady at Cunard they are in the process of shutting down the Voyage Personalizers for all 1225 people. I assume people will be issued with new booking references as I have. It is about time the likes of cruise lines and airlines allowed one to set an additional password to supplement only needing the booking reference and person's name to access their details.

DJ.
Thanks for the heads-up, DJ.

It looks like they have shut down the Voyage Personaliser for everyone at the moment. I was logged in a few minutes ago. Now when I try to access the Voyage Personaliser it says:

!
The system is offline at the moment.
We are working to restore it.
Please try again later.
__________________
"There’s nothing―absolutely nothing―half so much worth doing as messing about in boats." ― Kenneth Grahame, The Wind In The Willows

CroisiEurope Douce France, Rhine River (2004) ... Queen Mary 2, Eastbound Transatlantic (2005, 2010, 2014)
Queen Elizabeth 2, Norwegian Wonders (2008) ... Island Princess, Panama Canal (2008) ... Queen Victoria, Gallic Getaway (2009)
Norwegian Epic, Eastern Caribbean (2010) ... Brilliance of the Seas, Suez Canal (2011) ... Queen Elizabeth, Eastern Mediterranean (2012)
Maasdam, Canada and New England (2013) ... Queen Mary 2, Caribbean Fiesta (2013)

Last edited by bluemarble; June 23rd, 2012 at 12:43 PM.
Reply With Quote

  #5  
Old June 23rd, 2012, 02:54 PM
ToadOfToadHall's Avatar
ToadOfToadHall ToadOfToadHall is offline
Cool Cruiser
 
Join Date: Apr 2011
Location: Chester, UK
Posts: 726
Default

Now that is "dropping a cod" !
Reply With Quote

Ad Sponsored By
  #6  
Old June 23rd, 2012, 03:00 PM
Mr_Phoebe_Cat's Avatar
Mr_Phoebe_Cat Mr_Phoebe_Cat is offline
Cool Cruiser
 
Join Date: Apr 2011
Location: UK
Posts: 29
Default

Ouch.

I'd drop a line to http://www.ico.gov.uk/complaints/data_protection.aspx as well
__________________
Cruising -what's not to like?

2012 QV Baltics; 2011 QV Iberia; 2010 QV Around British Isles, Iberia; 2009 QM2 Transatlantic and 4th July Boston; 2008 QM2 Med; 2007 QM2 Norway
Reply With Quote

  #7  
Old June 23rd, 2012, 03:02 PM
Lanky Lad's Avatar
Lanky Lad Lanky Lad is offline
Cool Cruiser
 
Join Date: Feb 2007
Posts: 2,013
Default

If you are in the UK I would report this to the Information Commissioners office. It's just unacceptable.
__________________
QE2, 1991, 1994, 1996, 1997, 1998, 1999, 2000, 2001, 2004 (twice) 2005, 2006, 2007 (twice) and 2008 (twice). Caronia 2002 and 2003, QM2 2009 and 2010 (twice) and 2011, QV 2009, 2011, 2012, 2013 and 2014, QE 2012 (twice), 2013.



Reply With Quote

  #8  
Old June 23rd, 2012, 04:41 PM
davyjones davyjones is offline
Cool Cruiser
 
Join Date: Jun 2005
Posts: 40
Default

I have emailed several of the people on the list to see if they too received the email with the attachment.

On a slightly different note having so many booking ref numbers to look at at once one immediately sees they are not as random as one might think. The first two characters are all the same, the third has about 6 variations and the remaining three are random. It would not take too long to write a script to churn through the now not so many permutations together with a bunch of common fore and surnames and see if you get a match.
Reply With Quote

  #9  
Old June 23rd, 2012, 04:54 PM
Cruachan Cruachan is offline
5,000+ Club
 
Join Date: May 2007
Location: Old York
Posts: 5,569
Default

Quote:
Originally Posted by davyjones View Post
I have emailed several of the people on the list to see if they too received the email with the attachment.

On a slightly different note having so many booking ref numbers to look at at once one immediately sees they are not as random as one might think. The first two characters are all the same, the third has about 6 variations and the remaining three are random. It would not take too long to write a script to churn through the now not so many permutations together with a bunch of common fore and surnames and see if you get a match.
What would you do with the match once you had found it?

J
__________________
Reply With Quote

  #10  
Old June 23rd, 2012, 04:55 PM
darrencantwait's Avatar
darrencantwait darrencantwait is offline
Cool Cruiser
 
Join Date: Feb 2005
Location: New York City
Posts: 2,232
Default

I got this email as well. I am on the Nov. 20 W'bound crossing. I called Cunard and they said this was impossible. I had to reassure them that the document was right in front of me, and I can send it to them if they like, before they would get a supervisor. She said this was the first they had heard of it (I'm in the USA). She offered to rebook me, but in no way made it sound like they were automatically rebooking everybody. I had to call to initiate this.

I'm further dismayed that Cunard has not sent out an apology to all on the list for such a grievance. I feel like they completely do not understand the gravity of the situation. I actually had to ASK for an apology. Pitty.
__________________
none on deck

Quantum of the Seas -- 11/23/14 -- Bahamas

Constellation -- 06/14/14 -- Norwegian Fjords/Arctic Circle
Norwegian Gem -- 4/4/14 -- Western Caribbean
Oasis of the Seas -- 11/23/13 -- Western Caribbean
Summit -- 07/21/13 -- Bermuda
Celebrity Silhouette -- 02/17/13 -- Eastern Caribbean

Queen Mary 2 -- 11/20/12 -- Westbound Crossing
Summit -- Bermuda -- 07/01/12
Infinity 'Round the Horn 01/29/12
Allure of the Seas 05/08/11 -- W Caribbean
HAL Veendam -- Bermuda -- 07/25/10
Azamara Quest 02/06/10 -- Hong Kong to Singapore
Solstice Caribbean 03/01/09
NCL Gem 01/03/09 NYC "One Night Only!"
Mercury Alaska 08/24/08
Victory 07/03/08 -- 4th of July in St. John, NB CANADA!
Millennium Med Cruise 10/07/07
Queen Mary 2 07/02/07 NYC to Bahamas
NCL Dawn 05/05/07 NYC "One Night Only!"
Century 01/04/07
Freedom of the Seas 10/15/06
Constellation 3/4/06
Serenade of the Seas 11/19/05
Enchantment of the Seas 7/7/05
Constellation 3/5/05
Reply With Quote

  #11  
Old June 23rd, 2012, 04:56 PM
capnpugwash's Avatar
capnpugwash capnpugwash is offline
5,000+ Club
 
Join Date: Jun 2008
Location: Surrey UK
Posts: 7,163
Default

Quote:
Originally Posted by Cruachan View Post
What would you do with the match once you had found it?

J
You could put it all on Wiki-Anorak
__________________


E: private@jmclondon.com

I must go down to the seas again, to the vagrant gypsy life,
To the gull’s way and the whale’s way where the wind’s like a whetted knife;
And all I ask is a merry yarn from a laughing fellow-rover,
And quiet sleep and a sweet dream when the long trick’s over.

John Masefield


My blog can be found at http://thecapnpugwash.wordpress.com/

QE2 1 cruise 7 days
QM2 37 Transatlantics c241 days
QM2 5 cruises 38 days
QE 5 cruises 46 days
QV 6 cruises 74 days
P&O 8 cruises 135 days
Celebrity 1 cruise 12 days
RCIL 1 cruise 18 days
NCL 1 cruise 14 days
Fred Olsen 2 cruises 26 days
MSC 3 cruises 36 days

Future trips
Reply With Quote

  #12  
Old June 23rd, 2012, 04:58 PM
Cruachan Cruachan is offline
5,000+ Club
 
Join Date: May 2007
Location: Old York
Posts: 5,569
Default

Quote:
Originally Posted by capnpugwash View Post
You could put it all on Wiki-Anorak
I hope nobody cancels my shore excursions!



J
__________________
Reply With Quote

  #13  
Old June 23rd, 2012, 05:39 PM
davyjones davyjones is offline
Cool Cruiser
 
Join Date: Jun 2005
Posts: 40
Default

Quote:
Originally Posted by Cruachan View Post
What would you do with the match once you had found it?

J
Nothing as I'm a good guy but someone who wasn't might have a trawl for QG bookings (as that's where the money is ), get their address and telephone number, ring up when they are away and if no answer pay a visit.

The script is relatively easy to write. I use a similar idea to do pretend bookings so I can get back the detailed cabin prices and then send myself an email when they change. You would be surprised how often cabin grades switch between showing no availability and available. I suppose this is the time the upgrade fairy is on duty freeing up the cheaper cabins.
Reply With Quote

  #14  
Old June 23rd, 2012, 06:14 PM
Jimsgirl Jimsgirl is offline
Blue Ribbon Cruiser
 
Join Date: Aug 2002
Location: Pt Charlotte,FL USA
Posts: 4,306
Default

Quote:
Originally Posted by darrencantwait View Post
I got this email as well. I am on the Nov. 20 W'bound crossing. I called Cunard and they said this was impossible. I had to reassure them that the document was right in front of me, and I can send it to them if they like, before they would get a supervisor. She said this was the first they had heard of it (I'm in the USA). She offered to rebook me, but in no way made it sound like they were automatically rebooking everybody. I had to call to initiate this.

I'm further dismayed that Cunard has not sent out an apology to all on the list for such a grievance. I feel like they completely do not understand the gravity of the situation. I actually had to ASK for an apology. Pitty.
Very upsetting, and not at all smart of the supervisor to say "that is impossible" !!!!! As though you would call if it were not so.

To quote an English saying "Some mothers do have them".
Reply With Quote

  #15  
Old June 23rd, 2012, 06:34 PM
darrencantwait's Avatar
darrencantwait darrencantwait is offline
Cool Cruiser
 
Join Date: Feb 2005
Location: New York City
Posts: 2,232
Default

my concern is that this is a pretty tasty list that a lot of marketers would pay money for. I don't need any more email. In the end, it's a convenience for than a serious data security issue. But, it's not a great indicator of how Cunard/Carnival Corp treats their data privacy.
__________________
none on deck

Quantum of the Seas -- 11/23/14 -- Bahamas

Constellation -- 06/14/14 -- Norwegian Fjords/Arctic Circle
Norwegian Gem -- 4/4/14 -- Western Caribbean
Oasis of the Seas -- 11/23/13 -- Western Caribbean
Summit -- 07/21/13 -- Bermuda
Celebrity Silhouette -- 02/17/13 -- Eastern Caribbean

Queen Mary 2 -- 11/20/12 -- Westbound Crossing
Summit -- Bermuda -- 07/01/12
Infinity 'Round the Horn 01/29/12
Allure of the Seas 05/08/11 -- W Caribbean
HAL Veendam -- Bermuda -- 07/25/10
Azamara Quest 02/06/10 -- Hong Kong to Singapore
Solstice Caribbean 03/01/09
NCL Gem 01/03/09 NYC "One Night Only!"
Mercury Alaska 08/24/08
Victory 07/03/08 -- 4th of July in St. John, NB CANADA!
Millennium Med Cruise 10/07/07
Queen Mary 2 07/02/07 NYC to Bahamas
NCL Dawn 05/05/07 NYC "One Night Only!"
Century 01/04/07
Freedom of the Seas 10/15/06
Constellation 3/4/06
Serenade of the Seas 11/19/05
Enchantment of the Seas 7/7/05
Constellation 3/5/05
Reply With Quote

  #16  
Old June 23rd, 2012, 07:20 PM
Underwatr Underwatr is online now
Blue Ribbon Cruiser
 
Join Date: Jul 2010
Location: Pennsylvania
Posts: 3,618
Default

Nothing like 1200+ but before our Oct TA we got a notification email about some trivial thing and it included the names and booking numbers of two other sets of passengers. I ignored it, but I guess I could have signed the others up for shore excursions or something.
__________________


Past:
Queen Mary 2 (Caribbean Holiday) - December 2013
Carnival Pride (Bahamas) - October 2013
Queen Mary 2 (Caribbean Holiday) - December 2012
Caribbean Princess (Scandinavia) - July 2012
Queen Victoria (Hawaii) - February 2012
Queen Mary 2 (Eastbound Transatlantic Crossing) - October 2011
Queen Victoria (Panama Canal Transit) - March 2011
Queen Mary 2 (New England/Canada) - September 2010
Reply With Quote

  #17  
Old June 24th, 2012, 12:24 AM
Salacia Salacia is offline
5,000+ Club
 
Join Date: Apr 2010
Location: USA
Posts: 7,877
Default

Quote:
Originally Posted by ToadOfToadHall View Post
Now that is "dropping a cod" !
Ut-OH. that's bad.
Worse than dropping a flounder, or a trout even.

OP, thank you for the alert. I don't fancy having my passport number compromised (or any of the information I supplied on -line while booking a cruise or voyage.)
Reply With Quote

  #18  
Old June 24th, 2012, 12:28 AM
Salacia Salacia is offline
5,000+ Club
 
Join Date: Apr 2010
Location: USA
Posts: 7,877
Default

Quote:
Originally Posted by Cruachan View Post
I hope nobody cancels my shore excursions!



J
Shore excursions are not SURE excusions.
read the fine print

Last edited by Salacia; June 24th, 2012 at 12:36 AM.
Reply With Quote

  #19  
Old June 24th, 2012, 12:44 AM
Salacia Salacia is offline
5,000+ Club
 
Join Date: Apr 2010
Location: USA
Posts: 7,877
Default

Quote:
Originally Posted by darrencantwait View Post
my concern is that this is a pretty tasty list that a lot of marketers would pay money for. I don't need any more email. In the end, it's a convenience for than a serious data security issue. But, it's not a great indicator of how Cunard/Carnival Corp treats their data privacy.
I don't understand your comment: "it's a convenience for than a serious data security issue". To whom would it be a convenience?
Reply With Quote

  #20  
Old June 24th, 2012, 01:20 AM
Salacia Salacia is offline
5,000+ Club
 
Join Date: Apr 2010
Location: USA
Posts: 7,877
Default

Quote:
Originally Posted by Underwatr View Post
Nothing like 1200+ but before our Oct TA we got a notification email about some trivial thing and it included the names and booking numbers of two other sets of passengers. I ignored it, but I guess I could have signed the others up for shore excursions or something.
With a name and booking number, there are many things one could do, and far less beign than being signed up for shore excursions or something. You didn't ask, and I would not even if you had asked about what could do with a name and booking number. I' sure you could figure it out by yourself anyway.

I have great respect for the security team on board QM2, but the IT people have dropped the ball (or the cod, or whatever you want to call a serious breach of security).



As much as I enjoy a good laugh, is this security breach really funny?

Last edited by Salacia; June 24th, 2012 at 01:22 AM.
Reply With Quote

Reply

Bookmarks


Ad Sponsored By
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 09:44 AM.


© 1995 - 2014, The Independent Traveler, Inc. All rights reserved.
"A Community of People Who Love To Cruise"
All of the information contained within Cruise Critic is protected by copyright. You may, however, download a single copy only for your personal use.