In 2026, Carnival Corporation confirmed a data breach where an intruder accessed its internal systems directly. The company disclosed the incident after regulatory filings in states like Maine and Texas.
The breach affected approximately 5,995,277 individuals, with over 800,000 Texans confirmed. Data types exposed include names, email addresses, phone numbers, home addresses, dates of birth, and government-issued identification numbers (driver’s licenses and passport numbers). Carnival has not confirmed whether Social Security numbers, health, or financial data were involved. Publicly traded on the NYSE, Carnival Corporation & plc operates with an estimated pre-breach revenue of over $22.5 billion in 2025.
While details can emerge later and notices may be delayed, the full scope of this incident remains under assessment.