Data breach at Carnival exposes personal info of nearly 6 million, law firm investigates class action.

On April 14, 2026, Carnival Corporation detected unauthorized access to its systems via a social engineering attack on an employee, exposing personal data of about 5.99 million individuals. The exposed information includes names, addresses, emails, phone numbers, birth dates, and ID numbers, raising risks of identity theft and fraud. Edelson Lechtzin LLP is investigating a potential class action lawsuit and offers free case evaluations to affected individuals. Those impacted are advised to monitor accounts and consider fraud alerts and credit monitoring to protect themselves.