DisclosureLens
HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Carnival Corporation Ltd.

bd_1e5e7014d602908c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 18, 2021

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

67%
Full breach record for Carnival Corporation Ltd. →14 incidents on file

Carnival Corporation and plc submitted a data security breach notification to the California Office of the Attorney General on March 12, 2021. The incident involved unauthorized access to customer data, potentially exposing names, Social Security numbers, and financial account information. The company provided one year of free credit monitoring, cyber monitoring, and a $1,000,000 insurance reimbursement policy to affected individuals. The notification covers residents of multiple US states, including California, Iowa, and Kentucky.

Incident timeline

Mar 12, 2021

Begins

Oct 18, 2021

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 367d gap

Filing propagation · 6 filings · 4 states

View merged incident ↗
Oregon State AGOct 16 · first
Montana State AG+217d
Montana State AG+355d
Maine State AG+365d
Oregon State AG+367d
California State AG+367d · this page

Pattern: first filing Oct 16 (OR), last Oct 18 (CA) — a 367-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.