Carnival Data Breach Exposes Personal Details Of Nearly 6 Million Travelers
Carnival Corporation disclosed a data breach that exposed personal information for nearly 6 million travelers after the company detected unauthorized access in April 2026.[1]
A breach notice filed with the Maine attorney general lists 5,995,277 affected individuals.[1] It says compromised data includes names, email addresses, phone numbers, dates of birth, and driver's license and passport numbers.[1]
Carnival said the intrusion stemmed from a social engineering attack on a single employee account that allowed unauthorized access to systems.[1]
The company told affected customers it has notified law enforcement, hired third-party security experts, and is offering two years of free credit monitoring to some U.S. customers.[1] Travelers should watch for phishing attempts and monitor their financial and identity accounts for suspicious activity.
Show source details & analysis (1 source)
📌 Key Facts
- Carnival Corporation says it detected unauthorized access in April 2026 caused by a social engineering attack on a single employee account.
- A data breach notice to the Maine Attorney General lists 5,995,277 affected individuals.
- Compromised data categories include names, email addresses, phone numbers, dates of birth, and driver’s license and passport numbers.
- Carnival is offering two years of free credit monitoring to some U.S. customers and has notified law enforcement and hired third-party security experts.
📰 Source Timeline (1)
Follow how coverage of this story developed over time