Friendly reminder - do NOT post your NCL reservation information

[zqvol]

The whole purpose of this thread was to remind you to keep your personal information private. That has been done. It doesn’t matter who was at fault. 

[Two Wheels Only]

3 hours ago, pcakes122 said:

Whether or not the email was shown (not sure GMA got that right - I didn't see it on the screenshot the person shared), I don't see how it would have helped the person doing the scamming.

 

This is a cropped screenshot of what GMA showed (info blurred by them)....

 

 

...and it looks like the email address would be shown after the "Get the latest information about your cruise sent straight to your inbox at....." (top oval)

 

...and the booking number would be shown below the "Before You Go" (2 bottom ovals). 

 

 

 

 

[Two Wheels Only]

2 hours ago, zqvol said:

The whole purpose of this thread was to remind you to keep your personal information private. That has been done. It doesn’t matter who was at fault. 

 

This thread is also trying to sort through the story in order to get the correct information as to what happened. It went from "...I clicked the Share Countdown button on the email from Carnival..." (which would NOT reveal anyone's booking number) to "...I shared the screenshot..." which had the booking number and (it seems) also had the email address. 

 

If simply clicking the button caused all of this to happen, it would have been Carnival's fault. It's a good thing that people continued to post and ask questions in order to get the rest of the story. We now know that the suite was occupied by other guests so there was no "...give them back their suite..." option on embarkation day. We know what Carnival initially offered (2 interiors). We know what Carnival also offered (FCC...with stipulations). If people continue to question, we might learn more. 

[pcakes122]

11 minutes ago, Two Wheels Only said:

It went from "...I clicked the Share Countdown button on the email from Carnival..." (which would NOT reveal anyone's booking number) to "...I shared the screenshot..." which had the booking number and (it seems) also had the email address. 

 

If simply clicking the button caused all of this to happen, it would have been Carnival's fault.

First, the passenger didn't change their story about what was shared. I was the one that misunderstood originally, so that's on me.

 

Finally, I do think this is also Carnival's fault. In 2024 and this digital age, online security is paramount. When I do business with a company, I have a right to reasonably expect that they don't make it easy for people to hurt me.

 

Carnival should not allow people who are not verified as the booking owner to cancel bookings or do anything that would have a financial impact on their customers. Just having a booking number or even the passenger's email address should not be enough to cancel somebody's cruise, and cause them to lose $15K. Heck, I can't even cancel Netflix online. My phone company won't talk to me about my account unless they send me a text to my mobile number and I click OK. And that's just to have a conversation with me.

 

Everyone does have a responsibility to guard their personal information, but businesses ALSO have a responsibility to guard our personal information. And when they don't, they should take accountability.

[Two Wheels Only]

20 minutes ago, pcakes122 said:

First, the passenger didn't change their story about what was shared. I was the one that misunderstood originally, so that's on me.

 

Either way, continuing to ask questions got to the actual and correct information. 

 

20 minutes ago, pcakes122 said:

When I do business with a company, I have a right to reasonably expect that they don't make it easy for people to hurt me.

 

This "hurt" was created by the woman who posted the information. She made a mistake since she probably didn't intentionally share the information that was used to hurt her. 

 

20 minutes ago, pcakes122 said:

Carnival should not allow people who are not verified as the booking owner to cancel bookings or do anything that would have a financial impact on their customers. Just having a booking number or even the passenger's email address should not be enough to cancel somebody's cruise, and cause them to lose $15K.

 

I understand your point but when people share information that only they would know, it becomes more difficult to decipher if the person on the other end of the computer is the actual person or someone else. If Carnival added 3 security questions but the person shared the answers to those 3 questions, it isn't Carnival's fault if an imposter accesses the account. 

 

20 minutes ago, pcakes122 said:

Heck, I can't even cancel Netflix online.

 

You can.

Login - Account - Membership - Cancel Membership

 

20 minutes ago, pcakes122 said:

Everyone does have a responsibility to guard their personal information, but businesses ALSO have a responsibility to guard our personal information. And when they don't, they should take accountability.

 

Carnival didn't share her information.....She shared her information.

 

Edited June 5 by Two Wheels Only

[ChiefMateJRK]

18 minutes ago, pcakes122 said:

Carnival should not allow people who are not verified as the booking owner to cancel bookings or do anything that would have a financial impact on their customers.

How would you propose that they verify that the person on the phone is in fact the person holding the reservation?

[pcakes122]

5 minutes ago, Two Wheels Only said:

 

Either way, continuing to ask questions got to the actual and correct information. 

 

 

This "hurt" was created by the woman who posted the information. She made a mistake since she probably didn't intentionally share the information that was used to hurt her. 

 

 

I understand your point but when people share information that only they would know, it becomes more difficult to decipher if the person on the other end of the computer is the actual person or someone else. If Carnival added 3 security questions but the person shared the answers to those 3 questions, it isn't Carnival's fault if an imposter accesses the account. 

 

 

You can.

Login - Account - Membership - Cancel Membership

 

 

Carnival didn't share her information.....She shared her information.

 

Lol. I'm still not going do business with Carnival, but you go ahead. (Full disclosure - I used to work for them, so I'm familiar with many other areas in which they are lacking lol.)

[Two Wheels Only]

Just now, pcakes122 said:

Lol. I'm still not going do business with Carnival, but you go ahead. (Full disclosure - I used to work for them, so I'm familiar with many other areas in which they are lacking lol.)

 

I haven't sailed Carnival in over 10 years....no plans to return even before this story happened. 

[pcakes122]

10 minutes ago, ChiefMateJRK said:

How would you propose that they verify that the person on the phone is in fact the person holding the reservation?

My question to you is... if somebody called NCL with your booking number to cancel one of your fully-paid reservations, would you be good with NCL immediately processing the cancellation with no further questions or confirmation?

 

I would absolutely expect NCL to ask for more information than just the booking number.

[ChiefMateJRK]

2 minutes ago, pcakes122 said:

I would absolutely expect NCL to ask for more information than just the booking number.

Yes, I get that.  I'm asking what other information they should ask for.

[pcakes122]

1 minute ago, ChiefMateJRK said:

Yes, I get that.  I'm asking what other information they should ask for.

Well, I've cancelled quite a few NCL cruises (but always with CAS.)  Most of the agents I speak to have known me for years but still they ask my full name, address (including zip code) and DOB. I've even been asked for the last 4 digits of my CC to confirm where the refund will issued.  They have ALWAYS also asked WHY I am cancelling (and I certainly imagine they would if I was cancelling a $15K cruise 48 hours before sailing.)

[Two Wheels Only]

13 minutes ago, pcakes122 said:

Well, I've cancelled quite a few NCL cruises (but always with CAS.)  Most of the agents I speak to have known me for years but still they ask my full name, address (including zip code) and DOB.

 

If you posted ALL of that information on social media and someone cancelled your cruise, would it be NCL's fault?

 

If the cruise line requires 5 things to verify identity and someone posts 8 things about themself which includes the 5 things that the cruise line asks, it's not the cruise line's fault that the information is out there. 

 

Look at post  #3 in this thread. Chase and HSBC did nothing wrong.

"bae" messed up several times. 

Edited June 5 by Two Wheels Only

[pcakes122]

6 minutes ago, Two Wheels Only said:

 

If you posted ALL of that information on social media and someone cancelled your cruise, would it be NCL's fault?

 

If the cruise line requires 5 things to verify identity and someone posts 8 things about themself which includes the 5 things that the cruise line asks, it's not the cruise line's fault that the information is out there. 

 

Look at post  #3 in this thread. Chase and HSBC did nothing wrong.

"bae" messed up several times. 

The example in post #3 is an internet joke that has been around a while. 😂

 

And the Carnival cruiser did not post ALL of that info online. Again, we need to agree to disagree here. NCL does not make it easy for people to cancel other people's cruises, because they require you to call in and at least provide some identifying information. (Just the fact you have to call would deter some scammers.) Carnival makes it much easier to cancel other people's cruises because no phone call is required and no identification is verified.

 

If you think Carnival has safe online practices, great. I don't. I'm also happy that this cruiser posted about it so that people are aware and forewarned.

 

I used to be annoyed by dual authentication which is on about 80% of the websites I need to visit. Not anymore.

 

I also hope the person that did this to those cruisers is getting whatever they hoped to get out of their actions by seeing how this all played out (as others have suggested here and elsewhere online, just might have been the people that actually wound up sailing in that presidential suite.)

[Two Wheels Only]

7 minutes ago, pcakes122 said:

And the Carnival cruiser did not post ALL of that info online.

 

Obviously, she posted enough. 

 

8 minutes ago, pcakes122 said:

If you think Carnival has safe online practices, great. I don't. I'm also happy that this cruiser posted about it so that people are aware and forewarned.

 

People have to now be warned to not post their booking number and email address?

What's next? People need to be warned to not put ammunition in their luggage?

 

9 minutes ago, pcakes122 said:

I used to be annoyed by dual authentication which is on about 80% of the websites I need to visit. Not anymore.

 

Once people start to broadcast the information needed for dual authentication, triple authentication will be needed. 

 

11 minutes ago, pcakes122 said:

I also hope the person that did this to those cruisers is getting whatever they hoped to get out of their actions by seeing how this all played out (as others have suggested here and elsewhere online, just might have been the people that actually wound up sailing in that presidential suite.)

 

It's possible, but unlikely. I doubt that Carnival would be willing to inform anyone of how quickly after the cancellation the upgrade was made. It might require a bit more digging for information....

[pcakes122]

2 minutes ago, Two Wheels Only said:

 

Obviously, she posted enough. 

 

 

People have to now be warned to not post their booking number and email address?

What's next? People need to be warned to not put ammunition in their luggage?

 

 

Once people start to broadcast the information needed for dual authentication, triple authentication will be needed. 

 

 

It's possible, but unlikely. I doubt that Carnival would be willing to inform anyone of how quickly after the cancellation the upgrade was made. It might require a bit more digging for information....

Again, let's just agree to disagree on this one. Have a nice evening!

[Two Wheels Only]

9 minutes ago, pcakes122 said:

Again, let's just agree to disagree on this one. Have a nice evening!

 

It's not important that anyone agrees or not. It's more important to get the facts. 

 

The original story linked in post #1 stated that "foolishly posting Carnival Cruise itinerary" was the problem. That misinformation was quickly corrected. The rest was eventually sorted out to get to the point where we are at now. 

 

Eventually, we might find out who (allegedly) did it. 

[ChiefMateJRK]

1 hour ago, pcakes122 said:

Most of the agents I speak to have known me for years but still they ask my full name, address (including zip code) and DOB.

Really?  They all know you?  Are you calling some special number?  What if the person with ill-intent just called the regular reservation number?

 

DOB is a funny one, because people just love to post on social media when it's their birthday!🥳  Full name, address and DOB don't seem to be particularly secure.

Edited June 6 by ChiefMateJRK

[pcakes122]

2 minutes ago, ChiefMateJRK said:

Really?  They all know you?  Are you calling some special number?

I'm going to have to assume from your question that you are not familiar with CAS.

[ChiefMateJRK]

23 minutes ago, pcakes122 said:

I'm going to have to assume from your question that you are not familiar with CAS.

No.  I'm not.  Do all the CAS agents know you by your voice?  How often do you speak with them?  That seems bizarre.

[pcakes122]

4 minutes ago, ChiefMateJRK said:

No.  I'm not.  Do all the CAS agents know you by your voice?  How often do you speak with them?  That seems bizarre.

You usually work with one agent, so you develop ongoing relationships with your rep over the years, but occasionally could speak with another if your agent is out of the office.  The Miami CAS team has downsized - there used to be about 10 agents, now there's only a few left (maybe 5-ish?) I knew and worked with them all at one time or another. I cruise 6-8 times a year, so I talk to them pretty frequently to book, change reservations, find out about new offers, reschedule, etc. (There is now an Arizona call center that started out handling cruise certificates that are handed out at land casinos which handles Miami overflow - but I just deal with my regular rep who has been booking my comps for years.)  Even though he knows me, he still has to make me go through the ID stuff (I guess for the recording?)

[ChiefMateJRK]

41 minutes ago, pcakes122 said:

I cruise 6-8 times a year, so I talk to them pretty frequently to book, change reservations, find out about new offers, reschedule, etc. (There is now an Arizona call center that started out handling cruise certificates that are handed out at land casinos which handles Miami overflow - but I just deal with my regular rep who has been booking my comps for years.)  Even though he knows me, he still has to make me go through the ID stuff (I guess for the recording?)

Couldn't the nefarious person who wanted to hack your reservation just talk to a different agent?

[ontheweb]

I would think that the call centers have the feature where the number calling is displayed often with a name. I know when I call our TA, he says Hello, xxxx xxxxxxx, And he says that even before I speak, so it's not him recognizing my voice.

[schmoopie17]

After wading through pages of discussion on this thread, it occurred to me that the key piece of information was the woman posting her booking number. If someone she knows has a grudge against her, they obviously know her name and would most likely know her DOB and email address. 

 

Having said that...every time I contact NCL about an existing reservation they ask:

 

Name

Booking number

Ship name

Sail dates

 

I don't recall ever being asked DOB or email address.

But anyone who knows her and was impersonating her would know those, just in case they were asked.

 

 

Edited June 6 by schmoopie17

[thistimeplease]

15 hours ago, pcakes122 said:

Lol. I'm still not going do business with Carnival, but you go ahead. (Full disclosure - I used to work for them, so I'm familiar with many other areas in which they are lacking lol.)

It has also come to light that this is not the first time that this has happened with Carnival.  It seems more and more people are coming out with their stories of this exact situation.  So, to me, it does seem that Carnival knew about this situation and never fixed it.

[ontheweb]

3 minutes ago, thistimeplease said:

It has also come to light that this is not the first time that this has happened with Carnival.  It seems more and more people are coming out with their stories of this exact situation.  So, to me, it does seem that Carnival knew about this situation and never fixed it.

That does change things, though she is at least partly to blame as there is no reason to put her booking number out where anyone could access it.