:

CARNIVAL CRUISE CONFIRMS DATA BREACH OF 6M PEOPLE

SECURITY DESK1 MIN READ
FRI, MAY 29, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Carnival Corporation acknowledged a data breach affecting nearly 6 million people, with the ShinyHunters extortion gang claiming responsibility in April 2026. The incident marks a significant security failure for the world's largest cruise line operator.

Carnival Corporation has officially confirmed the data breach after ShinyHunters publicly claimed the attack. The extortion gang's disclosure forced the cruise operator to acknowledge the incident affecting millions of passengers and employees. The breach exposed personal information tied to Carnival's operations across its multiple cruise brands. ShinyHunters, known for targeting large corporations and threatening to sell stolen data, demanded payment related to the attack. Carnival has not yet detailed specific information exposed in the breach or provided a timeline for customer notifications. The company operates multiple cruise lines globally, serving millions of passengers annually. This incident adds to a growing list of major data breaches in the travel and hospitality sector. Carnival has not disclosed whether it paid any ransom or the total financial impact of the breach.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

A phishing-as-a-service platform called AnonyMousKIT uses voice AI agents to extract passcodes from stolen Apple devices and bypass Activation Lock security features.

1H AGOAI Desk

Following recent hacks of AI models, companies are debating whether to move cybersecurity testing online. Proponents argue that internet-connected tests provide more accurate threat assessments.

6H AGOAI Desk

France's tax administration fell victim to a significant security breach, exposing vulnerabilities in one of the country's most critical government systems. Details remain limited as authorities investigate the incident.

6H AGOSecurity Desk

A large distributed denial-of-service attack has disrupted Norway's shared government digital infrastructure since Monday, affecting public sector services accessible to citizens.

6H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.