Signal

Carnival confirms data breach affecting nearly 6 million customers after ShinyHunters attack

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-05-28 10:49 UTCUpdated 2026-05-28 14:45 UTC

rss

breachesthreat_actorsincident_responsesecurity_policy

Source links open

Source links and full evidence are open here. Pro adds archive history, compare-over-time, alerts, exports, and workflow. Business adds Feed API integrations and team usage.

Back Evidence (7)Get the free brief by email Start free trial

No card needed for the free brief.

Evidence trail (top sources)

top sources (4 domains)

4 top sources shown

Carnival Data Breach Exposed 6 Million People

SecurityWeek · securityweek.com · 2026-05-28 14:45 UTC

Cybercriminals sail away with data from 6 million Carnival customers

Helpnetsecurity · helpnetsecurity.com · 2026-05-28 14:04 UTC

Cruise giant Carnival confirms data breach affecting nearly 6 million people

Therecord · therecord.media · 2026-05-28 14:01 UTC

Carnival confirms ShinyHunters cruised off with 6M customer records after April breach

Theregister · theregister.com · 2026-05-28 12:10 UTC

View all evidence

Overview

Carnival Corporation, the world's largest cruise operator, confirmed a data breach in April 2026 that exposed personal information of nearly 6 million customers.

Entities

Carnival CorporationShinyHunters

Score total

1.76

Momentum 24h

Evidence documents

Independent publishers

Independent origins

Primary sources

Secondary sources

Source types

Duplicate ratio

Why now

The breach was publicly confirmed in May 2026 following ShinyHunters' claim.
The incident occurred recently in April 2026, with investigations ongoing.
ShinyHunters' extortion attempt and data leak increased public and regulatory scrutiny.

Why it matters

The breach exposes millions of customers to identity theft and fraud risks.
It highlights ongoing cybersecurity challenges for major travel companies.
The incident underscores the threat posed by social engineering attacks on employees.

LLM analysis

Topic mix: lowPromo risk: lowSource quality: high

Recurring claims

Carnival Corporation confirmed a data breach in April 2026 exposing nearly 6 million customer records.
The breach originated from a social engineering attack on an employee account, exploited by the ShinyHunters hacking group.
Stolen data includes names, addresses, emails, phone numbers, dates of birth, and state identification numbers.

How sources frame it