All breaches
Carnival data breach7.5M accounts compromised on 2026-04-18
Verified
Carnival (carnivalcorp.com) was the source of a data breach dated 2026-04-18, exposing 7,531,359 accounts. The details below are mirrored from Have I Been Pwned and reflect the source's account of the incident at the time of publication.
Incident Report
| Target Organization | Carnival |
|---|---|
| Source Name | Carnival |
| Domain | carnivalcorp.com |
| Breach Date | 2026-04-18 |
| Added to HIBP | 2026-04-24 |
| Accounts Compromised | 7,531,359(7.5M) |
| Data Exposed | Dates of birthEmail addressesGendersGeographic locationsLoyalty program detailsNamesSalutations |
| Status | Verified by HIBP |
Description
In April 2026, the notorious hacking collective ShinyHunters claimed they had obtained a substantial volume of data belonging to the Carnival cruise operator and attempted to extort the organisation to prevent the data from being leaked. The following week, the group published the data publicly, which contained 8.7M records with 7.5M unique email addresses. The data contained fields indicating it related to the Mariner Society loyalty program run by Holland America, a cruise line brand under Carnival, and included names, dates of birth, genders and data relating to status within the loyalty program. Carnival acknowledged a phishing incident involving a single user account and advised they were working to better understand the scope of the unauthorised activity.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.