HOUSTON — The Texas Attorney General’s Office said personal information belonging to as many as 800,060 Texans may have been exposed following a data breach involving Carnival Corp., according to a breach disclosure and company notice released last week.
Carnival reported that an unauthorized user accessed an employee account on April 14 and entered its information technology systems. The company said it blocked the compromised account after detecting the intrusion but said the attacker copied personal data.
Carnival said it continues to analyze the affected data to determine what information was accessed and which individuals were impacted.
The company said the exposed information may include names, addresses, email addresses, phone numbers, dates of birth, and government-issued identification numbers, such as driver’s license or passport details.
Carnival notified authorities of the breach and said it has strengthened its security systems with additional monitoring and safeguards.
The company said it will notify affected customers by email and provide two years of free credit monitoring through TransUnion.
Carnival also advised customers to monitor for identity theft or fraud and to contact law enforcement if suspicious activity occurs.
The company said affected individuals may place a credit freeze with Experian, TransUnion, and Equifax, or request a fraud alert from credit reporting agencies to help prevent unauthorized credit activity.
Carnival said it did not recommend one option over the other, stating that the choice remains up to individuals.