SignalAtlas
提交信息管理我的帖子
已确认

Carnival confirms personal-data exfiltration following employee vishing

Carnival disclosed on May 27 that an April 10 call impersonating internal IT obtained employee credentials and led to personal-data exfiltration.

最后更新: 2026-11-09

此内容以 English 显示。

概述

Suspicious activity was detected on April 14 and copying confirmed on April 22. Fields varied by person and included names, addresses, email, phone, birth dates and government ID numbers such as passports or driving licences. The official notices do not state an overall total.

时间线

  1. 发生
  2. 发现
  3. 披露

  4. A call impersonating internal IT obtained credentials.

  5. Unauthorized activity detected.

  6. Personal-data copying confirmed.

  7. First public notice and individual notifications.

组织应对措施

Carnival blocked access, investigated with specialists and notified law enforcement. Notices began May 27 and eligible US individuals were offered 24 months of protection services.

用户应对建议

Monitor identity and account misuse and verify unexpected requests through official contacts.

信息来源

  1. Carnival Corporation Notice of Data BreachCarnival Corporation / PR Newswire · 2026-11-09
  2. Carnival regulator letter and sample individual noticeIowa Attorney General / Carnival · 2026-11-09

相关信息与讨论

提交信息

暂无公开信息

来源核实或审核通过后，信息将显示在此处。

评论与回复

写评论

无需注册。评论提交后立即公开。

请勿发布私人姓名、地址、密码或验证码。自动遮盖有局限，请在提交前检查。

必填项标有 *。

提交正文后可遮盖敏感信息并添加图片。

正在加载安全验证。验证完成后即可提交。