SignalAtlas
Partager une information
Confirmé

Carnival confirms personal-data exfiltration following employee vishing

Carnival disclosed on May 27 that an April 10 call impersonating internal IT obtained employee credentials and led to personal-data exfiltration.

Dernière mise à jour: 2026-11-09

Ce contenu est affiché en English.

Présentation

Suspicious activity was detected on April 14 and copying confirmed on April 22. Fields varied by person and included names, addresses, email, phone, birth dates and government ID numbers such as passports or driving licences. The official notices do not state an overall total.

Chronologie

  1. Survenue
  2. Découverte
  3. Divulgation

  4. A call impersonating internal IT obtained credentials.

  5. Unauthorized activity detected.

  6. Personal-data copying confirmed.

  7. First public notice and individual notifications.

Réponse de l’organisation

Carnival blocked access, investigated with specialists and notified law enforcement. Notices began May 27 and eligible US individuals were offered 24 months of protection services.

Que faire ?

Monitor identity and account misuse and verify unexpected requests through official contacts.

Sources

  1. Carnival Corporation Notice of Data BreachCarnival Corporation / PR Newswire · 2026-11-09
  2. Carnival regulator letter and sample individual noticeIowa Attorney General / Carnival · 2026-11-09

Informations associées

Partager une information

Aucune information publiée

Les informations apparaîtront après vérification ou modération.

Commentaires et réponses

Écrire un commentaire

Sans inscription. Les commentaires sont publiés immédiatement.

Ne publiez pas de noms privés, d’adresses, de mots de passe ou de codes. Le masquage automatique est limité : vérifiez avant l’envoi.