Cruise operator Carnival discloses personal data breach

May 27, 2026 5:22 PM EDT

FILE PHOTO: The Carnival cruise ship Sunrise is seen docked at Miami Port, in Miami, Florida, U.S., June 18, 2022. Picture taken with a drone. REUTERS/Marco Bello/File Photo

May 27 (Reuters) - Cruise ‌operator Carnival ​Corp ​said on Wednesday it had detected a cybersecurity incident involving a compromised account ‌of an employee in April, leading to the ⁠leak of certain personal information of individuals, including names, ‌addresses and government-issued identification ‌numbers.

The company said it quickly blocked the unauthorized activity, which used social engineering to deceive an ​employee and gain access to the data. Carnival added it hired third-party security experts to ⁠conduct a thorough investigation.

• The company is notifying the affected individuals by ​email where possible and offering U.S. customers two years of free credit monitoring through ​TransUnion, with notifications beginning on ‌May 27, Carnival said in the statement.

• Carnival said it has strengthened ⁠its security and monitoring controls and will continue to enhance its IT and data protection measures.

• The company ⁠has urged the affected individuals to enroll in free credit monitoring, ​remain vigilant for fraud, review account activity and credit reports, and report suspected identity theft to local authorities.

• In ‌2021, Carnival had detected unauthorized access to its computer systems, which affected ‌personal information of some guests, employees and crew ⁠for Carnival Cruise Line, ‌Holland America Line, ​Princess Cruises and medical operations.

(Reporting by Anuja Bharat Mistry in Bengaluru; editing by Alan ‌Barona)



Serious News for Serious Traders! Try StreetInsider.com Premium Free!

You May Also Be Interested In





Related Categories

Reuters