Was It Breached Secria

Recent breaches

Carnival data breach: what leaked, and what to do now

Carnival says someone tricked an employee in April 2026 and copied customers' personal information. For some people that includes passport or driver's license numbers.1,2

Carnival Corporation

May 27, 2026

Re: Notice of Cybersecurity Event

First name, last name:

... We have determined that your data elements were obtained.

We are offering you a complimentary 24-month membership to TransUnion's credit monitoring. Ensure that you enroll by: August 31, 2026 (Your code will not work after this date).

... please call the TransUnion call center at 1-844-593-8310, from 8 a.m. to 8 p.m. ET Monday through Friday ...

  1. Dated 27 May 2026The heading in the sample Carnival filed with California's attorney general.1
  2. Your own list of what leakedFilled in per person. The company says the data varies by individual.1,2
  3. The deadline has passedEnrollment in the free TransUnion monitoring closed on 31 August 2026.1
  4. The call centerThe same number appears in Carnival's public notice, run by TransUnion for Carnival.1,2

Drawn from the sample letter Carnival filed with California's attorney general. Checked 28 October 2026 against the sources.

The facts, as filed

"The company says" marks Carnival's own account. A listing here isn't a finding that the company was at fault.

What happened
The company says its security team found unauthorized activity on an employee's account on 14 April 2026. Someone had used social engineering to deceive the employee and reach a limited part of its IT system. On 22 April it found that personal information had been copied.1
People affected
Carnival's public notice gives no total, and we couldn't confirm one in a record we can show you. Its Texas filing, published 28 May 2026, counts 800,060 Texans.2,3
What leaked
The company says it is known to include name, address, email address, phone number, date of birth and a government-issued ID number. The Texas filing names driver's license numbers and IDs such as passports.2,3
Monitoring offer
24 months of TransUnion credit monitoring for people in the U.S. The enrollment deadline was 31 August 2026.1,2
Lawsuits
Cruise Hive reported on 30 April 2026 that three proposed class actions had been filed against Carnival Corporation in federal court in southern Florida, between 22 and 24 April. Those are claims, not findings. We found no settlement as of 28 October 2026.4

From one employee account to letters in the mail

The dates come from Carnival's letter and its filings.

  1. Carnival spots unauthorized activity on an employee's account.1

  2. It finds that personal information was copied.1

  3. Letters, a public notice and a California filing.1,2

  4. Last day to enroll in the free monitoring.1

What to do now

Match the steps to the data your letter lists. The full checklist covers every data type.

  1. Check, freeze or monitor your credit yourself.The free offer has closed, but a credit freeze is free and keeps anyone opening new credit in your name while it's in place.5
  2. Passport number listed: see the State Department's steps.IdentityTheft.gov points to its lost or stolen passport report at travel.state.gov.5
  3. Driver's license listed: tell your DMV.The state might flag the number or suggest a duplicate.5
  4. Be wary of messages about the breach.Don't respond to unexpected calls, texts or emails. Contact Carnival through a website or number you look up yourself.5

Questions people ask

Is the Carnival data breach email or letter real?

Carnival says it sent letters and emails starting 27 May 2026, and its notice gives the TransUnion call center at 1-844-593-8310.2 Compare yours with the sample it filed in California.1

Is there compensation or a claim form for the Carnival breach?

Not that we could find as of 28 October 2026. Proposed class actions have been filed, but no court has approved a settlement.4 A real claim process comes with a court-approved notice that names the case. This isn't legal advice.

Can I still get the free credit monitoring?

The letter says codes stop working after 31 August 2026.1 Weekly credit reports at AnnualCreditReport.com and a credit freeze are free regardless.5

Sources 5
  1. Carnival Corporation: filing and sample notice (reported 27 May 2026), California Attorney General. Read 28 October 2026.
  2. Carnival Corporation Notice of Data Breach (PR Newswire release of 27 May 2026, as republished by WOWK), Carnival Corporation. Read 28 October 2026.
  3. Data Security Breach Reports, Office of the Texas Attorney General. Carnival Corporation, published 28 May 2026. Read 28 October 2026.
  4. Carnival served with multiple lawsuits over major data breach (30 April 2026), Cruise Hive. Read 28 October 2026.
  5. What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach, IdentityTheft.gov, Federal Trade Commission. Read 28 October 2026.

Every breach is checked against the company's own notice and a government record, and every source shows the day we read it. How we check