Carnival Corporation

Disclosed Oct 13, 20205 years ago37,500 affectedConfirmed

What is known

People affected	37,500 (as reported by the organization)
Disclosed	Oct 13, 2020
Discovered	Oct 5, 2020
Happened	Mar 12, 2021
Attack	Not stated
Data exposed	Names
Sector	Other · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: Carnival Corporationoag.ca.gov · Official notice	Official notice
Notice letter filed with the Delaware DOJ: Carnival Corporationattorneygeneral.delaware.gov · Official notice	Official notice
Oregon DOJ breach notice: Carnival Corporationjustice.oregon.gov · Official notice	Official notice
Indiana Attorney General 2020 data breach report: Carnival Corporationin.gov · Official notice	Official notice

Where	Filed	People
California AGresidents of CA	Oct 13, 2020
Delaware DOJresidents of DE	Oct 13, 2020	5
Indiana AGresidents of IN	Oct 13, 2020	2,494
Oregon DOJresidents of OR	Oct 16, 2020	37,500
California AGresidents of CA	Feb 4, 2021
California AGresidents of CA	Oct 18, 2021
Oregon DOJresidents of OR	Oct 18, 2021	20,992

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Mar 2, 2020Mar 2, 20206 years agoHacking	Mar 2, 20206 years ago	Hacking	Other	Confirmed	373K

History of this record

2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2020.pdf · backfill source
2026-09-25 · data_types: [] to ["names"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 37500 · backfill source
2026-09-25 · discovered: empty to 2020-10-05 · backfill source
2026-09-25 · disclosed: 2021-02-04 to 2020-10-13 · backfill source
2026-09-25 · disclosed: 2021-10-18 to 2021-02-04 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.