Carnival Corporation Offers Two Years of Free Credit Monitoring After Data Breach

Carnival Corporation, recognized as the largest cruise company globally, has announced that it is providing certain U.S. travelers with two years of free credit monitoring services following a data breach. This incident compromised the personal details of nearly 6 million individuals.

Details of the Breach

In a statement to Fox News Digital, Carnival Corporation explained that unauthorized access to a segment of its IT system was identified in April. The breach resulted from a social engineering attack targeting a single user account. The company promptly blocked this activity, engaged third-party security experts, and informed law enforcement about the breach.

According to a news release on Carnival’s website, the breach involved an unauthorized individual who gained access by deceiving an employee. This actor managed to access sensitive personal information.

“In our investigation, we discovered that personal data was accessed illegally,” the company stated.

Impact and Response

The breach impacted 5,995,277 people, as noted in Carnival’s data breach notice filed with the Maine Attorney General’s office. Details compromised include names, email addresses, phone numbers, birth dates, and driver’s license and passport numbers.

Carnival has informed the affected individuals via notification letters. The company expressed regret and emphasized its commitment to data privacy and security. “We are notifying affected individuals and deeply regret any concern this causes,” the company told Fox News Digital.

Further, Carnival has been conducting an extensive analysis to ascertain the specifics of the compromised data and has enhanced its security measures. It has added new security layers and pledged ongoing improvements to its defenses against evolving threats.

Customer Reactions and Company Clarifications

Some customers expressed frustration over the delay in notification. Carnival clarified in an online notice that complex incidents necessitate detailed investigation to identify affected data and ensure accurate notifications.

Unverified claims by a group of cybersecurity hackers, ShinyHunters, suggested involvement in the breach. However, Carnival has not confirmed these claims.

In response to the breach, Carnival is offering additional support by providing affected U.S. customers two years of complimentary credit monitoring through TransUnion. The company also advises customers to monitor their financial accounts closely and report any fraudulent activities to the authorities.