Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2026-04-18Verifiedcarnivalcorp.com
What happened
In April 2026, the notorious hacking collective ShinyHunters claimed they had obtained a substantial volume of data belonging to the Carnival cruise operator and attempted to extort the organisation to prevent the data from being leaked. The following week, the group published the data publicly, which contained 8.7M records with 7.5M unique email addresses. The data contained fields indicating it related to the Mariner Society loyalty program run by Holland America, a cruise line brand under Carnival, and included names, dates of birth, genders and data relating to status within the loyalty program. Carnival acknowledged a phishing incident involving a single user account and advised they were working to better understand the scope of the unauthorised activity.
Data exposed
Frequently asked questions
The Carnival data breach occurred on April 18, 2026. It was added to Have I Been Pwned's breach catalog on April 24, 2026.
7,531,359 accounts were affected by the Carnival data breach, according to Have I Been Pwned's records.
The Carnival breach exposed the following data types: Dates of birth, Email addresses, Genders, Geographic locations, Loyalty program details, Names, Salutations.
Yes. Have I Been Pwned has verified the Carnival breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the Carnival breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.