Carnival Corporation recently disclosed a data security incident that, according to the company, affected approximately 6 million individuals worldwide.
In a notice issued by Carnival, the company stated that it became aware of unauthorized access to certain systems following a social engineering attack involving an employee account. Carnival reported that the incident was detected in April 2026 and that an investigation was conducted with the assistance of external cybersecurity professionals.
According to Carnival’s public disclosures, the information involved may vary by individual but could include personal information such as names, addresses, email addresses, telephone numbers, dates of birth, and, for some individuals, government-issued identification information, including passport or driver’s licence details.
At this time, Carnival has reported that approximately 5,995,277 individuals may have been affected globally. The company has not publicly disclosed how many affected individuals reside in Canada.
Individuals who received a notification from Carnival regarding this incident may wish to review the information provided by the company and monitor their accounts and personal information for any unusual activity. Carnival has indicated that it is notifying affected individuals and providing information regarding available support services where applicable.
Slater Vecchio LLP is seeking to better understand the impact of this incident on Canadians.
If you have received a letter, email, or other communication from Carnival regarding this data security incident, we invite you to contact our firm and provide a copy of the communication you received. Information shared by affected individuals may assist us in assessing the scope of the incident and its potential impact on Canadians.
