Carnival

2 breaches6M affected in allTechcarnivalcorp.com

Carnival confirms social engineering breach exposing 5,995,277 customersPhishing exposed names, government IDs, dates of birth, emails, location data and addresses. Reported to the California AG.Phishing6.0M affectedHospitalityUSApr 24 Breach, details not statedExposed names, government IDs and health records. Reported to the Delaware DOJ.38K affectedUSMar 2, 2020

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages, the company profile.

source2026-09-25

Carnival, 2026-04-24https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf

source2026-09-25

Carnival, 2026-04-24https://ago.vermont.gov/categories/security-breach-notices

data_types2026-09-25

Carnival, 2026-04-24["names","government-id","dob","emails","location","other","addresses"]

sector2026-09-25

Carnival, 2026-04-24hospitality

attack2026-09-25

Carnival, 2026-04-24phishing

data_types2026-09-25

Carnival, 2026-04-24["names","government-id","dob","emails","location","other"]

records2026-09-25

Carnival, 2026-04-245995277

summary2026-09-25

Carnival, 2026-04-24Carnival told the Maine AG that an actor deceived an employee to access part of its IT system, exposing names, birth dates, emails, locations and loyalty data of 5,995,277 customers. ShinyHunters had claimed 8.7 million records in April.

title2026-09-25

Carnival, 2026-04-24Carnival confirms social engineering breach exposing 5,995,277 customers

hibp2026-09-25

Carnival, 2026-04-24Carnival

sector2026-09-25

Carnival, 2026-04-24tech

data_types2026-09-25

Carnival, 2026-04-24["names","government-id","dob","emails","location"]

disclosed2026-09-25

Carnival, 2026-04-242026-04-24

summary2026-09-25

Carnival, 2026-04-24In April 2026, the notorious hacking collective ShinyHunters claimed they had obtained a substantial volume of data belonging to the Carnival cruise operator and attempted to extort the organisation to prevent the data from being leaked. Th

domain2026-09-25

Carnivalcarnivalcorp.com

records_basis2026-09-25

Carnival, 2020-03-02organization

records2026-09-25

Carnival, 2020-03-0237500

data_types2026-09-25

Carnival, 2026-04-24["names","government-id"]

records_basis2026-09-25

Carnival, 2026-04-24organization

records2026-09-25

Carnival, 2026-04-245200000

Added2026-09-25

Carnival, 2020-03-02

attack2026-09-25

Carnival, 2026-04-24hacking

discovered2026-09-25

Carnival, 2026-04-242026-04-14

Added2026-09-25

Carnival, 2026-04-24

Added2026-09-25

Carnival