DisclosureLens
Social EngineeringRetail & ConsumerRetailPhishingCustomer Data InvolvedPIIIdentity (basic)LowContained

Carnival Corporation Ltd.

bd_1a1bc5215fd93cf0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 14, 2026

Filed

May 27, 2026

To disclose

—

Affected

Not disclosed

Linked

16 filings

Confidence

66%
Full breach record for Carnival Corporation Ltd. →14 incidents on file

Carnival Corporation notified Nebraska AG on May 27, 2026, of a cybersecurity event discovered on April 14, 2026. An unauthorized actor used social engineering (phishing) to gain access to an employee account and copied personal information. The company blocked the activity, engaged third-party security experts, and is offering 24 months of TransUnion credit monitoring to affected individuals.

Leak gap clock⏱ Leak >30d

Incident timeline

Apr 14, 2026

Discovered

May 27, 2026

Filed

This filing is one of 16 about the same incident.View merged incident
A leak claim by shinyhunters about this victim predates this filing by 39 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 1d gap

Showing first 10 of 15 linked disclosures.

Filing propagation · 11 filings · 11 states

View merged incident ↗
Washington State AGMay 27 · first
Maine State AGMay 27 · first
Indiana State AGMay 27 · first
Oregon State AGMay 27 · first
California State AGMay 27 · first
Delaware State AGMay 27 · first
Nebraska State AGMay 27 · first · this page
Texas State AG+1d
Massachusetts State AG+1d
Vermont State AG+1d
South Carolina State AG+1d

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.