New York Department of Financial Services Announces $5 Million Penalty in Most Recent Cybersecurity Enforcement Action

On June 23, 2022, the New York State Department of Financial Services announced the entry of a Consent Order in connection with its most recent cybersecurity enforcement action, which included a $5 million monetary penalty against Carnival Cruise Line, Princess Cruise Lines, Holland America Line, Seabourn Cruise Line, and Costa Cruise Lines, for violations of NYDFS’s Cybersecurity Regulation, 23 NYCRR Part 500.