What was exposed, when it happened, and which databases confirm it.
- accounts
- 15,098,280
- Breached
- April 18, 2026
- Last Update
- April 24, 2026
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In April 2026, the notorious hacking collective ShinyHunters claimed they had obtained a substantial volume of data belonging to the Carnival cruise operator and attempted to extort the organisation to prevent the data from being leaked. The following week, the group published the data publicly, which contained 8.7M records with 7.5M unique email addresses. The data contained fields indicating it related to the Mariner Society loyalty program run by Holland America, a cruise line brand under Carnival, and included names, dates of birth, genders and data relating to status within the loyalty program. Carnival acknowledged a phishing incident involving a single user account and advised they were working to better understand the scope of the unauthorised activity.
Compromised Info
- Dates of birth
- Email addresses
- Genders
- Geographic locations
- Loyalty program details
- Names
- Salutations
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the Carnival breach?
The Carnival breach exposed: Dates of birth, Email addresses, Genders, Geographic locations, Loyalty program details, Names, and Salutations.
When did the Carnival breach happen?
The Carnival breach was disclosed on April 18, 2026 and affected 15,098,280 records.
Am I affected by the Carnival breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Carnival leak.