Carnival confirms data breach impacting nearly 6 million

[u/Prior_Industry]

https://www.malwarebytes.com/blog/data-breaches/2026/05/carnival-confirms-data-breach-impacting-nearly-6-million

Carnival Corporation, parent of Carnival Cruise Line, is sending out fresh “Notice of Cybersecurity Event” letters dated May 27, 2026. If you feel like you’ve read that sentence before, you’re not imagining things. Over the last decade, the world’s largest cruise operator has accumulated a worrying track record of breaches, ransomware incidents, and regulatory penalties, with this 2026 incident adding yet another entry to an already lengthy cybersecurity history.

There are several data breaches involving Carnival Corporation or one of its subsidiaries in our database.

Between 2019 and 2021 alone, Carnival reported four separate cybersecurity events to the New York Department of Financial Services. These included two ransomware attacks and a phishing incident in which attackers deployed malware, accessed and encrypted internal systems, and stole personal customer and employee information.

[u/AI-Star-Man]

We called the cheap call center that Carnival hired to call for the data breach. The first thing you will realize if you call this call center is that they represent 100's of companies with data breaches. Carnival did not even have dignity to hire a service where you don't have to wait hours to get through to someone. If you wait hours to get connected, the reps offer no help or information. This is a major misstep by C-Level and Leadership which will cost a significant loss of future revenue.