UnknownCustomer Data InvolvedPIIIDENTITY_BASICHighContained
Carnival Corporation Ltd.
bd_24671352cfb8e0c5 · schema v1 · pii pii-v1
Full breach record for Carnival Corporation Ltd. →Carnival Corporation reported a data breach occurring on April 10, 2026, discovered on April 14, 2026. The incident affected 5,995,277 individuals nationwide, including 9,746 Maine residents. Notification was sent electronically on May 27, 2026. Affected individuals were offered 24 months of credit monitoring and fraud assistance through TransUnion. The specific nature of the breach and data types were not detailed in the filing.
Maine clockDiscovered Apr 14, 2026 → Filed with AG May 27, 202643d ⏱ ME AG >30d6 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 7 about the same incident.View merged incident
A leak claim by shinyhunters about this victim predates this filing by 39 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_403cc5ab7d096381Indiana State AGfiled 2026-05-27Verified
- bd_843aca7813130288California State AGfiled 2026-05-27Verified
- bd_aa341ce145e41ff4Delaware State AGfiled 2026-05-27Verified
- bd_debade6bb3f0ccedNew Hampshire State AGfiled 2026-05-27Verified
Show 2 more filings ↓Show fewer ↑up to 1d gap
- bd_a217ec232607f2bdVermont State AGfiled 2026-05-28(1d gap)Verified
- bd_b40f7e0268a40f14South Carolina State AGfiled 2026-05-28(1d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d6729ef2-7bb3-42d3-abdd-99a1dd8f2415.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 27, 2026
- Raw hash
- e3c9ce40dd105d4c606991454d2db6c7d0942e9ec3835bc72e691ebecba47b6b
Reporting entity
- Name
- Carnival Corporation Ltd.norm: carnival
- Domain
- carnivalcorp.com
Victim entity
- Name
- Carnival Corporation Ltd.norm: carnival
- Domain
- carnivalcorp.com
Incident
- Discovered
- Apr 14, 2026
- Materiality determined
- —
- Notification sent
- May 27, 2026
- Affected individuals
- 5,995,277
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unknown
- Regulator citations
- Filed breach notification with Maine Attorney General
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- ME AG >30d · 43dLeak >30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 14, 2026→ Filed with AG: May 27, 202643d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.