Norwegian Cruise Line investigates phishing emails sent to guests
Passengers reported fraudulent messages containing accurate reservation information and links seeking security or payment details.
Norwegian Cruise Line has opened an investigation after passengers reported receiving phishing emails that impersonated the company and included genuine reservation details. The information reportedly included guest names, assigned ships, sailing dates and booking numbers.
The suspicious messages directed recipients to follow embedded links for purported security verification, payment-card confirmation or completion of online check-in. One Reddit user booked on Norwegian Encore said an email contained complete reservation information, including the exact amount paid for the cruise. Another Reddit user scheduled to sail on Norwegian Getaway reported receiving at least six suspicious messages with accurate booking references and personal information.
Norwegian said it was aware of reports that fraudulent emails falsely claiming to come from the cruise line had been sent to guests and that it was actively investigating. The company has not publicly confirmed a data breach or explained how the senders obtained the accurate reservation information.
The cruise line posted a warning on its website, notified travel advisors by letter and said it planned to alert guests departing within 30 days. Norwegian advised passengers to inspect sender addresses carefully, noting that its official correspondence comes from domains ending in @ncl.com or @nclcorp.com.
