Carnival Corporation has confirmed a data breach affecting nearly 6 million people, and the fallout could reach travelers who may not think of themselves as Carnival customers.The company says the incident involved a social engineering attack on a single user account.In other words, someone fooled an employee and gained access to part of Carnival's IT system.For cruise customers, the real concern starts after the breach.
Stolen personal details can help scammers write messages that feel far more believable.Here is what may have been exposed, what Have I Been Pwned found in the leaked data and what you can do now to protect yourself.MAJOR CRUISE LINE HACK EXPOSES SENSITIVE DATA OF NEARLY 6 MILLION TRAVELERSCarnival says exposed data may include names, addresses, emails, phone numbers, dates of birth and government-issued ID numbers.
(iStock)Carnival Corporation says the breach began with a social engineering attack on a single user account.An unauthorized actor gained access to a limited part of the company's IT system.
Carnival says it immediately blocked the activity, brought in third-party security experts and alerted law enforcement.A Carnival Corporation spokesperson told CyberGuy,"In April, we identified unauthorized access to a limited part of our IT system caused by a social engineering attack on a single user account.We immediately blocked the activity, engaged third-party security experts and alerted law enforcement.
Our investigation found certain personal information was illegally accessed.We're notifying affected individuals and deeply regret any concern this causes.
Protecting the privacy and security of personal data is a priority for us and we've added new layers of security and monitoring on top of the comprehensive protections already in place.We'll also continue advancing our defenses against evolving threats."State breach reporting shows 5,995,277 people were affected.
Carnival says the impacted data varies by individual.However, the compan...