Back Securityaffairs.Co

Carnival Data Breach Exposes Personal Data of Nearly 6 Million Customers

Securityaffairs.Co •Pierluigi Paganini • May 28, 2026

Carnival disclosed a data breach affecting nearly 6 million people after hackers used social engineering to access employee accounts. Carnival Corporation is notifying nearly 6 million people after a data breach exposed personal information. According to the notification shared with the Maine Attorney General’s Office, the total number of persons affected is 5,995,277. The company said […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Carnival Corporation Data Breach Affects Nearly 6 Million Customers Carnival Corporation reported a significant data breach affecting approximately 6 million customers due to a social engineering attack on an employee's account. The breach was detected on April 14, 2026, when unauthorized activity was identified. The attackers, linked to the ShinyHunters group, reportedly accessed sensitive personal information including names, addresses, email addresses, phone numbers, dates of birth, and government-issued identification numbers. Carnival began notifying affected individuals on May 27, 2026, offering two years of complimentary credit monitoring through TransUnion. The company is enhancing its security measures and has engaged third-party experts for further investigation. The breach is part of a larger trend of cyberattacks targeting various organizations, with ShinyHunters known for previous high-profile incidents. Legal actions are being pursued against Carnival for alleged failures in timely notification. 47 sources 69

Extracted Entities

Carnival Data Breach Exposes Personal Data of Nearly 6 Million Customers

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)