The personal information of nearly 6 million individuals may have been compromised due to a recent data breach at Carnival Corporation. The company announced that they are reaching out to those potentially affected by this cybersecurity incident, which occurred in April 2026.

Details of the Breach

According to a notice on the Maine attorney general’s website, the breach took place on April 10 and was discovered by Carnival’s IT security system on April 14. The breach involved unauthorized activity on an employee’s account, which was compromised through social engineering tactics. This method involves tricking individuals into providing security information or account access.

Carnival stated that the hacker accessed a limited portion of the company’s IT system. However, the personal information believed to be compromised includes names, addresses, email addresses, phone numbers, dates of birth, and government-issued ID numbers such as driver’s licenses or passport numbers.

Response and Recommendations

Carnival is offering two years of complimentary credit monitoring services through TransUnion to individuals in the U.S. who may have been impacted. The company has pledged to enhance its security measures and monitoring controls to prevent future incidents.

Individuals who suspect they have been affected are encouraged to enroll in the credit monitoring services at no charge. Additionally, they should report any suspected identity theft or fraud to local law enforcement.

Carnival’s proactive approach in notifying affected individuals and offering credit monitoring services reflects a commitment to safeguarding personal information and addressing the breach’s impact.

Original reporting: KGW Portland — read the source article.