Data breach
Carnival Corporation data breach
In 2026, Carnival Corporation suffered a data breach affecting 8,791,109 records. Exposed data included email addresses, phone numbers, addresses and 15 other types of data.
Breach date
8.8 million
Records in the breach
18
Types of data exposed
Were you affected by the Carnival Corporation breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Carnival Corporation breach
- Email addresses
- Phone numbers
- Addresses
- Names
- Surname
- State
- Country
- Encrypted CCN
- Loyalty Tier
- Birth Date
- Status
- Household Identification
- DMA
- Travel Agent Flag
- Cruise Information
- High Value Information
- Casino Tier
- Gender
About the breach
Carnival Corporation officially confirmed a major data breach impacting nearly 6 million individuals (approximately 5,995,277 people) after a social engineering attack targeted an employee's IT account.
Key Facts of the Incident
• Timeline of Attack:
• April 14, 2026: Carnival detected suspicious activity after criminals used social engineering to deceive an employee into handing over login credentials.
• April 22, 2026: Carnival determined that unauthorized actors had copied personal data.
• Late April 2026: The hacking collective ShinyHunters claimed responsibility, attempted extortion, and later leaked a large dataset online. Independent analysis of the leaked data suggests roughly 8.7 million records and 7.5 million unique email addresses were circulated.
• May 27, 2026: Carnival formally began sending notification letters to affected customers.
• Compromised Information:
• Full names, home addresses, phone numbers, and email addresses.
• Dates of birth and genders.
• Government-issued identification numbers (such as passport numbers and driver's licenses).
• Loyalty program details (such as Mariner Society status), booking histories, and internal account identifiers.
• Payment or banking information for a subset of victims.
• Impacted Brands:
• Includes customers across Carnival-operated brands such as Carnival Cruise Line, Holland America Line, Princess Cruises, P&O Cruises, and Costa Cruises.
What Carnival Is Doing
• Credit Monitoring: Carnival is offering U.S. affected customers 24 months of complimentary credit monitoring through TransUnion (via MyTrueIdentity with Cyberscout fraud assistance).
• Investigations: State regulators—including Texas Attorney General Ken Paxton—opened official investigations into the breach and the delay in consumer notifications.
Key Facts of the Incident
• Timeline of Attack:
• April 14, 2026: Carnival detected suspicious activity after criminals used social engineering to deceive an employee into handing over login credentials.
• April 22, 2026: Carnival determined that unauthorized actors had copied personal data.
• Late April 2026: The hacking collective ShinyHunters claimed responsibility, attempted extortion, and later leaked a large dataset online. Independent analysis of the leaked data suggests roughly 8.7 million records and 7.5 million unique email addresses were circulated.
• May 27, 2026: Carnival formally began sending notification letters to affected customers.
• Compromised Information:
• Full names, home addresses, phone numbers, and email addresses.
• Dates of birth and genders.
• Government-issued identification numbers (such as passport numbers and driver's licenses).
• Loyalty program details (such as Mariner Society status), booking histories, and internal account identifiers.
• Payment or banking information for a subset of victims.
• Impacted Brands:
• Includes customers across Carnival-operated brands such as Carnival Cruise Line, Holland America Line, Princess Cruises, P&O Cruises, and Costa Cruises.
What Carnival Is Doing
• Credit Monitoring: Carnival is offering U.S. affected customers 24 months of complimentary credit monitoring through TransUnion (via MyTrueIdentity with Cyberscout fraud assistance).
• Investigations: State regulators—including Texas Attorney General Ken Paxton—opened official investigations into the breach and the delay in consumer notifications.
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.