Carnival
2 breaches6M affected in allTechcarnivalcorp.com
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Carnival confirms social engineering breach exposing 5,995,277 customersApr 245 months agoPhishing | Apr 245 months ago | Phishing | Hospitality | Confirmed | 6M |
| Disclosed Mar 2, 2020Mar 2, 20206 years ago | Mar 2, 20206 years ago | Not stated | Other | Confirmed | 38K |
About
Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.
- 2026-09-25 · Carnival, 2026-04-24 · source: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf
- 2026-09-25 · Carnival, 2026-04-24 · source: https://ago.vermont.gov/categories/security-breach-notices
- 2026-09-25 · Carnival, 2026-04-24 · data_types: ["names","government-id","dob","emails","location","other","addresses"]
- 2026-09-25 · Carnival, 2026-04-24 · sector: hospitality
- 2026-09-25 · Carnival, 2026-04-24 · attack: phishing
- 2026-09-25 · Carnival, 2026-04-24 · data_types: ["names","government-id","dob","emails","location","other"]
- 2026-09-25 · Carnival, 2026-04-24 · records: 5995277
- 2026-09-25 · Carnival, 2026-04-24 · summary: Carnival told the Maine AG that an actor deceived an employee to access part of its IT system, exposing names, birth dates, emails, locations and loyalty data of 5,995,277 customers. ShinyHunters had claimed 8.7 million records in April.
- 2026-09-25 · Carnival, 2026-04-24 · title: Carnival confirms social engineering breach exposing 5,995,277 customers
- 2026-09-25 · Carnival, 2026-04-24 · hibp: Carnival
- 2026-09-25 · Carnival, 2026-04-24 · sector: tech
- 2026-09-25 · Carnival, 2026-04-24 · data_types: ["names","government-id","dob","emails","location"]
- 2026-09-25 · Carnival, 2026-04-24 · disclosed: 2026-04-24
- 2026-09-25 · Carnival, 2026-04-24 · summary: In April 2026, the notorious hacking collective ShinyHunters claimed they had obtained a substantial volume of data belonging to the Carnival cruise operator and attempted to extort the organisation to prevent the data from being leaked. Th
- 2026-09-25 · Carnival · domain: carnivalcorp.com
- 2026-09-25 · Carnival, 2020-03-02 · records_basis: organization
- 2026-09-25 · Carnival, 2020-03-02 · records: 37500
- 2026-09-25 · Carnival, 2026-04-24 · data_types: ["names","government-id"]
- 2026-09-25 · Carnival, 2026-04-24 · records_basis: organization
- 2026-09-25 · Carnival, 2026-04-24 · records: 5200000
- 2026-09-25 · Carnival, 2020-03-02 · added
- 2026-09-25 · Carnival, 2026-04-24 · attack: hacking
- 2026-09-25 · Carnival, 2026-04-24 · discovered: 2026-04-14
- 2026-09-25 · Carnival, 2026-04-24 · added
- 2026-09-25 · Carnival · added