Back Therecord.Media

Cruise giant Carnival confirms data breach affecting nearly 6 million people

Therecord.Media • May 28, 2026

The company said the threat actor gained access to a limited portion of its IT environment last month after compromising an employee account. By the end of April, Carnival determined that the attacker had copied personal information from its systems.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Carnival Corporation Data Breach Affects Nearly 6 Million Customers Carnival Corporation reported a significant data breach affecting approximately 6 million customers due to a social engineering attack on an employee's account. The breach was detected on April 14, 2026, when unauthorized activity was identified. The attackers, linked to the ShinyHunters group, reportedly accessed sensitive personal information including names, addresses, email addresses, phone numbers, dates of birth, and government-issued identification numbers. Carnival began notifying affected individuals on May 27, 2026, offering two years of complimentary credit monitoring through TransUnion. The company is enhancing its security measures and has engaged third-party experts for further investigation. The breach is part of a larger trend of cyberattacks targeting various organizations, with ShinyHunters known for previous high-profile incidents. Legal actions are being pursued against Carnival for alleged failures in timely notification. 47 sources 69

Extracted Entities

Cruise giant Carnival confirms data breach affecting nearly 6 million people

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)