Aussies amongst millions affected in Carnival Cruise Line data breach by cyber criminals

Carnival Cruise Line notified approximately six million customers that their personal data was potentially compromised following a cybersecurity breach discovered on April 14. The unauthorized access, attributed to the cybercrime group ShinyHunters, exposed names, emails, phone numbers, and identification documents including passports and driver's licenses. Carnival stated it blocked the activity immediately, engaged security experts, and alerted law enforcement. Australian customers were among those affected but, unlike American cruisers, did not receive complimentary credit monitoring services. The company has since strengthened security measures and recommended customers monitor financial accounts, change passwords, enable multi-factor authentication, and report suspicious activity to police. Australia's Information Commissioner provides guidance for breach victims on protecting against identity theft and fraud.

Originally reported by Cruise Passenger Australia, Tallis Boerne Marcus (June 2, 2026).