Carnival Corporation data breach
Carnival Corporation appears in 12 breach notices filed with Vermont AG, SC Consumer Affairs, Texas AG, California AG, Washington AG, Oregon DOJ, Montana DOJ, Indiana AG, Iowa AG and New Hampshire DOJ, most recently reported on May 28, 2026.
Breach notices filed with regulators
| Reported | Filed with | Breach date(s) | People affected | Data involved | Source |
|---|---|---|---|---|---|
| May 28, 2026 | Vermont AG | Not listed | 3,915 Vermont residents | Government ID Numbers | Vermont AG list ↗ |
| May 28, 2026 | SC Consumer Affairs | Not listed | 134,156 South Carolina residents | Not listed | Notice ↗ |
| May 28, 2026 | Texas AG | Apr 10, 2026 – Apr 14, 2026 | 800,060 Texas residents | Name of individualAddressDriver’s License numberGovernment-issued ID number (e.g. passport, state ID card)Date of Birth | Texas AG list ↗ |
| May 27, 2026 | California AG | Apr 10, 2026 | Not listed | Not listed | California AG list ↗ |
| May 27, 2026 | Washington AG | Apr 10, 2026 – Apr 14, 2026 | 54,960 Washington residents | NameDriver's License or Washington ID Card NumberFull Date of BirthPassport Number | Washington AG list ↗ |
| May 27, 2026 | Oregon DOJ | Apr 10, 2026 – Apr 14, 2026 | 5,995,277 Oregon residents | Not listed | Oregon DOJ list ↗ |
| May 27, 2026 | Montana DOJ | Apr 10, 2026 | 5,690 Montana residents | Not listed | Notice ↗ |
| May 27, 2026 | Indiana AG | Apr 10, 2026 | 85,084 Indiana residents | Not listed | Indiana AG list ↗ |
| May 27, 2026 | Iowa AG | Not listed | Not listed | Not listed | Notice ↗ |
| May 27, 2026 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Oct 6, 2021 | Montana DOJ | Apr 8, 2021 | 63 Montana residents | Not listed | Notice ↗ |
| Oct 20, 2020 | SC Consumer Affairs | Not listed | 5,801 South Carolina residents | Not listed | Notice ↗ |
Each row is a notice as published by the agency. For state lists, the number affected counts only that state's residents; HHS lists the total reported. SEC rows are Form 8-K Item 1.05 filings, which usually don't give a count. A notice does not mean a settlement exists, and a settlement may cover a different incident than a given notice.
Is there a settlement?
We don't track an open class-action settlement for Carnival Corporation right now. Settlements usually come months or years after a breach. Get an email when new settlements are announced.
What you can do now
- Read the notice letter if you got one. It says what data was involved and may offer free credit monitoring with an enrollment deadline.
- Consider a free credit freeze at Equifax, Experian and TransUnion, especially if your Social Security number was involved.
- Change reused passwords and turn on two-factor authentication.
- Watch your bank, card and insurance statements for activity you don't recognize.
Get new settlements and deadline reminders
One email a week: newly announced data-breach settlements and claim deadlines that are about to close. Free. Unsubscribe anytime.