Carnival Data Breach: Here’s Exactly How Scammers Got Your Personal Information

Carnival Corporation disclosed a significant data breach affecting millions of customers across its cruise brands, including Carnival Cruise Line, Princess Cruises, Holland America Line, and Cunard. The breach was first detected on April 14 when an employee's account was compromised by an unauthorized actor, though notification to affected passengers didn't begin until May 27. Hackers accessed full names, addresses, email addresses, phone numbers, and passport numbers. The group ShinyHunters claimed responsibility, exploiting the breach through identity-based attacks to extract data at scale. Experts recommend affected passengers reset passwords, enable multi-factor authentication, and monitor accounts closely. Carnival is offering 24 months of complimentary credit monitoring through TransUnion, with activation codes that expire August 31.

Originally reported by Cruise Radio, Richard Simms (May 29, 2026).