SignalAtlas
Share a reportManage my posts
Confirmed

Carnival confirms personal-data exfiltration following employee vishing

Carnival disclosed on May 27 that an April 10 call impersonating internal IT obtained employee credentials and led to personal-data exfiltration.

Last updated: 2026-11-09

Overview

Suspicious activity was detected on April 14 and copying confirmed on April 22. Fields varied by person and included names, addresses, email, phone, birth dates and government ID numbers such as passports or driving licences. The official notices do not state an overall total.

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed

  4. A call impersonating internal IT obtained credentials.

  5. Unauthorized activity detected.

  6. Personal-data copying confirmed.

  7. First public notice and individual notifications.

Organization response

Carnival blocked access, investigated with specialists and notified law enforcement. Notices began May 27 and eligible US individuals were offered 24 months of protection services.

What you can do

Monitor identity and account misuse and verify unexpected requests through official contacts.

Sources

  1. Carnival Corporation Notice of Data BreachCarnival Corporation / PR Newswire · 2026-11-09
  2. Carnival regulator letter and sample individual noticeIowa Attorney General / Carnival · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.

Comments and replies

Write a comment

No account needed. Comments appear immediately.

Do not post private names, addresses, passwords, or codes. Automatic masking is limited; review your content before submitting.

Required fields are marked *.

After submitting the text, you can redact and attach images.

Loading the security check. You can submit once it is complete.