Carnival Data Breach Exposes Data of Nearly 6 Million Customers

Carnival confirmed a cyber incident in which personal information for nearly 6 million customers was exposed after an intrusion. The company reported that the activity began on April 10, was detected on April 14, and led to an investigation and blocking of further access. On April 22, Carnival determined that personal data had been exfiltrated from its systems. The ShinyHunters group claimed responsibility and stated it stole more than 8.7 million customer records and terabytes of corporate data. Carnival notified 5,995,277 affected customers and said threat actors compromised an employee account through social engineering, then accessed a limited portion of the company’s IT system.

"Carnival notes that the threat actors compromised an employee's account through social engineering. Using the compromised account, the threat actors accessed "a limited portion of the Company's IT system." Although many cyberattacks begin with a form of s"

"According to a filing made with the Maine Attorney General's Office, the incident occurred on April 10 but wasn't noticed until four days later, on April 14. Upon detecting the unauthorized activity, the company launched an investigation and blocked further access to its systems. However, it wasn't until April 22 that it was determined that personal data had actually been exfiltrated from its systems."

"The company has confirmed a cyber incident affecting its systems that has exposed personal information belonging to nearly 6 million customers. The disclosure follows claims by the ShinyHunters group that it stole millions of records and terabytes of corporate data in an April intrusion."

"While the company hasn't named any culprits yet, the ShinyHunters hacking group has claimed responsibility for the breach, saying it stole more than 8.7 million customer records, including personally identifiable information and terabytes of company data. In a notification sent to the 5,995,277 affected customers, Carnival notes that the threat actors compromised an employee's account through social engineering."

Read at TechRepublic