Carnival Hit by Cyberattack Exposing Personal Data

Carnival Hit by Cyberattack Exposing Personal Data in April

Carnival, the cruise line, suffered a cybersecurity attack in April that exposed some individuals' data and personal information. An unauthorized actor used social engineering to deceive an employee and gain access to a limited portion of Carnival's IT system. The company detected the issue on April 14, blocked the activity, and launched an investigation with third-party security experts.

What Data Was Compromised?

The attacker accessed personal information including names, addresses, email addresses, phone numbers, birth dates, and government-issued IDs such as driver's license and passport numbers. The impacted data varies by individual. Carnival is offering affected U.S. individuals two years of complimentary credit monitoring through TransUnion.

The company has notified all impacted individuals and set up a webpage to report the incident publicly. Carnival is still working to determine the full extent of the accessed information.