Carnival data breach exposed personal data of nearly 6 million customers

Carnival disclosed a data breach affecting 5,995,277 people. Attackers used social engineering on April 14, 2026, to compromise an employee account and then accessed internal systems and files containing customer data.