{ "type": "bundle", "id": "bundle--9aaf0ca9-ec9e-50a2-8781-89322cdc44f1", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--1162cbab-423f-5594-8073-4b76293a9741", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "org:514bb10a-fdf0-4cf1-bc9a-137ce056cb3b", "name": "Carnival Corporation", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--02ca575e-a5a9-54da-827c-26482f0fa2e6", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "brh:7a72400a-d08a-4aff-b10f-b67df16da313", "name": "Carnival Corporation social-engineering data breach" }, { "type": "incident", "spec_version": "2.1", "id": "incident--f0d0476f-d6a0-5011-82b9-1c8a08177c27", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "inc:3fd7e097-c7ab-4309-9e8f-e3c0ad6ff00a", "name": "April 2026 Carnival Corporation social-engineering incident" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--043c6088-cde3-5258-8cc6-731d0e6b23f1", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:f5343c44-3607-42ae-a9d3-045e13149cab", "relationship_type": "affected-organization", "source_ref": "incident--f0d0476f-d6a0-5011-82b9-1c8a08177c27", "target_ref": "identity--1162cbab-423f-5594-8073-4b76293a9741", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:e210bf43-55df-41f5-8f06-8ddb27811b30", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ec22339-3192-5df5-8a11-65f1ac535bbd", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:2ef92ff3-355a-48d2-b446-0bc89a0219c9", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "target_ref": "x-ally-data-category--a5875288-3af8-5021-801a-9ae62c23e6d2", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:ac50f41d-94c1-4de1-96ae-8b9cc7c91db8", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3405a509-12cd-544c-8c51-757e5da42e0e", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:67616077-a032-4ae2-a926-4d39de40208a", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "target_ref": "x-ally-data-category--b82a6005-4623-5256-83d6-809edefdbbbe", "confidence": 90, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Carnival", "external_id": "cit:f4b62fc4-a87e-4874-84c8-b406c8945b77", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:493b6aad367f93527c5d3572145be60edf162ea6fab5e37a9f6e3b775bedfa5d" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67017e7a-b33a-56e0-85e5-ec0cb7bb30bf", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:0cac887f-df3c-4999-a28f-fff6eb014d95", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:7b902df2-5260-49ea-9144-3c33cb492b65", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e8d298b-2f38-583c-8e91-898ec6d0cde5", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:7c4d828a-9cdd-4434-a062-e695910b7d53", "relationship_type": "resulted-in", "source_ref": "incident--f0d0476f-d6a0-5011-82b9-1c8a08177c27", "target_ref": "x-ally-legal-proceeding--9fa2e679-c216-52ec-8f7b-7ae1b2d68f53", "confidence": 100, "external_references": [ { "source_name": "U.S. Securities and Exchange Commission", "url": "https://www.sec.gov/Archives/edgar/data/815097/000081509726000096/ccl-20260531.htm", "external_id": "cit:23f17883-cffc-46db-99f5-34e94e367431", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:dce36a74defb095f215aa57da62f279b60991ccecfb32be785a16871711a5533" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--835902bb-c217-5d1d-89c3-3df5fbbde8dc", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:d57e706d-bd9d-49e3-95ab-8090f69dab5c", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "target_ref": "x-ally-data-category--e88abdf1-a199-5c86-80c5-317bfbf871a1", "confidence": 90, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Carnival", "external_id": "cit:7fa89948-20f8-46a5-94b0-38c7689e8643", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:493b6aad367f93527c5d3572145be60edf162ea6fab5e37a9f6e3b775bedfa5d" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94415bd8-438c-560c-8b4c-4aecb0269907", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:00ee2bd9-efee-4d8f-8082-a985caa09e0e", "relationship_type": "resulted-in", "source_ref": "incident--f0d0476f-d6a0-5011-82b9-1c8a08177c27", "target_ref": "x-ally-legal-proceeding--f7761107-c198-51cc-896f-5d3286817e42", "confidence": 100, "external_references": [ { "source_name": "Office of the Attorney General of Texas", "url": "https://oag.state.tx.us/news/releases/attorney-general-paxton-announces-ongoing-investigation-carnival-cruise-line-over-data-breach", "external_id": "cit:828ca58e-b66c-4d0b-a8ad-cbeaaa8e3232", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:51ce1e23b117a4d3ba44c0ec396421eb049a96b1f10936f9532c2044f0ca7a9a" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b16da85c-6140-5668-8024-a5acb5992d31", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:354bdbbe-c754-432c-bd7b-ca0324dc1a87", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:d1dd04c2-d0f2-4e3b-8983-e54e6ff7b90c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" }, { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Carnival", "external_id": "cit:743d4a61-9f36-4d4d-810e-d511470a2abe", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:493b6aad367f93527c5d3572145be60edf162ea6fab5e37a9f6e3b775bedfa5d" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba0c06a6-7ee1-5af5-8044-562ab8ec0fbf", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:c165a3f0-62ba-47a8-9753-41fb771a6350", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "target_ref": "x-ally-data-category--8a4b38eb-4642-521b-8ce5-b7722d526458", "confidence": 90, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Carnival", "external_id": "cit:7d26c7b4-c844-495d-8fe1-c3029c88af3c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:493b6aad367f93527c5d3572145be60edf162ea6fab5e37a9f6e3b775bedfa5d" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8d2e834-c927-51f5-852a-7562da5d0d2c", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:4f037983-b24b-4883-9659-c585eee8901f", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:feb3fc40-fb4d-4c96-9acc-7992d47c4255", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" }, { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Carnival", "external_id": "cit:0369e9bd-f492-478a-8b18-758e296dfa93", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:493b6aad367f93527c5d3572145be60edf162ea6fab5e37a9f6e3b775bedfa5d" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca4667fc-1780-5dd9-81b9-ac3272cccb5e", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:e770e4ee-0bbf-46a8-9151-153e6219933a", "relationship_type": "affected-organization", "source_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "target_ref": "identity--1162cbab-423f-5594-8073-4b76293a9741", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:7d3ee272-11ad-47e3-a40c-1f455d2f319b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cac2fa5c-377a-53e8-8cef-668654c9602a", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:671c780e-eb26-4711-9e57-7f11384ebd19", "relationship_type": "resulted-in", "source_ref": "incident--f0d0476f-d6a0-5011-82b9-1c8a08177c27", "target_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:f5257b0f-8364-488f-bbd1-5a9db7ff584b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de072869-b630-5680-855f-ae64509a63de", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:bf6188e2-eb96-40a2-b316-a7e2e22dfa7e", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "target_ref": "x-ally-data-category--0e475596-55d5-5383-86b9-9e5074f2a0ed", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:290aeaee-14ea-4938-a32b-75f9736e62ee", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8e2e4df-feb0-5257-8914-739ad2699600", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:2d9d98c0-8332-4ced-9554-da8d305ceb4b", "relationship_type": "resulted-in", "source_ref": "incident--f0d0476f-d6a0-5011-82b9-1c8a08177c27", "target_ref": "x-ally-notification--a51d80bf-1946-5d7f-8f88-986183983a4a", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:809baba1-1178-4ffb-97fb-1dadfe6ad1c9", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--0cd19a99-3015-559f-8a94-fe530609089c", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:45ac46a8-3e59-4e9d-a8ab-e5978e60012d", "confidence": 100, "external_references": [ { "source_name": "Office of the Attorney General of Texas", "url": "https://oag.state.tx.us/news/releases/attorney-general-paxton-announces-ongoing-investigation-carnival-cruise-line-over-data-breach", "external_id": "cit:856fad40-db4d-4b60-bdba-2500bf1cf28b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:51ce1e23b117a4d3ba44c0ec396421eb049a96b1f10936f9532c2044f0ca7a9a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 800060, "unit": "individual" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--4121b50e-fa05-5351-8e34-b1633e345ba7", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:a27d4bb9-7d00-4195-9502-00256b8ca205", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:59cbeee6-60e4-44ed-ae67-b3a8c9249be9", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Carnival began notifying individuals whose personal information was affected, using email where required and available." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--5395fefe-10ce-54ba-861f-77464a54d8d6", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:da6faa87-60ba-4e3b-8e35-470252fb0b06", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:ac2f5cd6-e055-46f1-a5c6-0bd7001bdedd", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Carnival notified law enforcement." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--54a3ebb8-d6f8-5a3a-8890-4a15c198b462", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:09b24847-b754-48db-9b29-c8416df1a3e7", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:69a9c552-eade-44bc-a51b-745705caaf56", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "On April 22, Carnival first determined that the unauthorized actor had illegally copied personal information." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--68a8fbd1-2829-51fb-8ffd-7b6c4c3c56f5", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:809bb8bb-602a-48ef-9afb-1e05574e5d96", "confidence": 100, "external_references": [ { "source_name": "Office of the Attorney General of Texas", "url": "https://oag.state.tx.us/news/releases/attorney-general-paxton-announces-ongoing-investigation-carnival-cruise-line-over-data-breach", "external_id": "cit:ce80049f-a3dc-465d-a1ed-c6de31b85b4e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:51ce1e23b117a4d3ba44c0ec396421eb049a96b1f10936f9532c2044f0ca7a9a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The Texas Attorney General announced an ongoing investigation, following a Civil Investigative Demand, into whether Carnival adequately safeguarded Texas consumers' information and maintained reasonable protective procedures." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--6db93989-f682-5968-88c4-61dd65ca4f73", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:2db3f689-2d3e-4e1b-9526-475801186f0b", "confidence": 100, "external_references": [ { "source_name": "Office of the Attorney General of Texas", "url": "https://oag.state.tx.us/news/releases/attorney-general-paxton-announces-ongoing-investigation-carnival-cruise-line-over-data-breach", "external_id": "cit:a96c99b2-f27f-47af-91bc-31de453c2a3e", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:51ce1e23b117a4d3ba44c0ec396421eb049a96b1f10936f9532c2044f0ca7a9a" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 6000000, "unit": "individual", "approximate": true } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--779d7150-3e6d-568e-8545-3f42d51ae8f7", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:765f0e0c-2b6e-4aa3-bd63-62994b1d87ab", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:7080d6b5-3f7e-44ca-ab86-557ac6990115", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Carnival engaged third-party security experts and enhanced its security and monitoring controls." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--86ccb1ab-42ee-595e-89fe-82354aecfd52", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:6bcdcfbb-3049-4f3f-a86b-de36a0023439", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:4113f173-0114-4b9a-99ca-5116956ed805", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-05-27" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--93b265a7-68fe-54de-80ee-a60347cb92ca", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:d847a966-3da6-4253-8304-579718641b8e", "confidence": 100, "external_references": [ { "source_name": "U.S. Securities and Exchange Commission", "url": "https://www.sec.gov/Archives/edgar/data/815097/000081509726000096/ccl-20260531.htm", "external_id": "cit:b33a58bf-bfb6-4e3c-ad20-eeb98206b742", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:dce36a74defb095f215aa57da62f279b60991ccecfb32be785a16871711a5533" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "In May 2026, the district court granted the plaintiffs' motion to consolidate the matters." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--9e25a07a-891b-5231-89be-be78662f5121", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:bd4bbb0e-b97f-4f6a-9019-d5878a2ce986", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:029ac636-8fc6-4882-9092-827957c8f567", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Carnival offered eligible U.S. individuals two years of complimentary TransUnion credit monitoring." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--ad9bed94-7930-5ece-8e18-500c5346c1c0", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:8db208f6-5bb9-4b91-b807-71504a6550ae", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:945849ce-7073-43f3-919b-6c9a39543f1f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-04-14" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--af5ae469-8fc1-582e-83e8-c2e028d62f6f", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:ea98f090-e330-419d-bad0-58a3735520c8", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:c4d19d7e-fc15-4588-b20d-88a36ed44aff", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-04-14" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--c706f4b2-5df2-52d5-8e22-a84f102c926f", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:509de140-d752-467f-a991-bc9dce4972d7", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:4fcf820d-6dfe-4c3e-a15c-0b39d71edce1", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" }, { "source_name": "U.S. Securities and Exchange Commission", "url": "https://www.sec.gov/Archives/edgar/data/815097/000081509726000096/ccl-20260531.htm", "external_id": "cit:bfeb0a55-8b32-4c4e-aa9c-8af346f0ca7c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:dce36a74defb095f215aa57da62f279b60991ccecfb32be785a16871711a5533" }, { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Carnival", "external_id": "cit:5c8973b2-2754-4de6-a124-f6482411fd4c", "x_ally_stance": "qualifies", "x_ally_snapshot_id": "snp:sha256:493b6aad367f93527c5d3572145be60edf162ea6fab5e37a9f6e3b775bedfa5d" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-04-14" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--cecaf94c-468c-5e6d-8d6c-92727c996554", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:dba54354-98c0-4df1-9613-9bb6a0607f4a", "confidence": 100, "external_references": [ { "source_name": "Have I Been Pwned", "url": "https://haveibeenpwned.com/api/v3/breach/Carnival", "external_id": "cit:b755aa54-173b-49ae-be8f-5770e9a3e307", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:493b6aad367f93527c5d3572145be60edf162ea6fab5e37a9f6e3b775bedfa5d" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 7531359, "unit": "record" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--e0e6af1e-dfaa-523b-844d-41c762a2853a", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:2a2d8933-0fd8-4747-a7da-759d99197770", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:cfb0bb48-7478-4a71-ac88-7d9df8d2dc07", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The unauthorized actor gained access to a limited portion of Carnival's IT system." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--e38228c1-0cdc-5369-82ff-7901e9bbba10", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:04d9b23b-5ebe-4f2f-bc4f-62184fbee9c9", "confidence": 100, "external_references": [ { "source_name": "U.S. Securities and Exchange Commission", "url": "https://www.sec.gov/Archives/edgar/data/815097/000081509726000096/ccl-20260531.htm", "external_id": "cit:ac5bf2ad-0793-4e8e-be28-9062760e7c15", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:dce36a74defb095f215aa57da62f279b60991ccecfb32be785a16871711a5533" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Six purported class actions were brought in April 2026 in the U.S. District Court for the Southern District of Florida in relation to the April 14 incident." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--e6f08761-a7e4-546c-8965-ec17ee8427a2", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "clm:a1b57f0b-ee3e-45a0-8d0c-2199e7933389", "confidence": 100, "external_references": [ { "source_name": "Carnival Corporation", "url": "https://www.carnivalcorp.com/wp-content/uploads/2026/05/Website-Notice-Substitute-Notice-05.27.26.pdf", "external_id": "cit:58ce138b-b614-4449-ae91-3a56607ccdfa", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:d287057013c74173427e6265baeca668a5b24fcb426f8587931baf33ccb1cb04" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "An unauthorized actor used social engineering to deceive an employee and obtain access through the employee's account." } }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--0e475596-55d5-5383-86b9-9e5074f2a0ed", "created": "2026-08-08T23:32:54Z", "modified": "2026-08-08T23:32:54Z", "x_ally_original_id": "dat:6dfe9275-03bf-4617-8a72-2c61a08bcffc", "name": "Driver's license numbers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--8a4b38eb-4642-521b-8ce5-b7722d526458", "created": "2026-08-09T01:12:00Z", "modified": "2026-08-09T01:12:00Z", "x_ally_original_id": "dat:74c79a35-6d37-461e-b865-805c619d4231", "name": "Gender information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0", "name": "Names" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--a5875288-3af8-5021-801a-9ae62c23e6d2", "created": "2026-08-08T23:32:54Z", "modified": "2026-08-08T23:32:54Z", "x_ally_original_id": "dat:f6504134-e597-4f8c-802b-087547d02511", "name": "Passport numbers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--b82a6005-4623-5256-83d6-809edefdbbbe", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "dat:8bc5e6c0-ee96-450a-a50e-f5a90aa454de", "name": "Loyalty program information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9", "name": "Contact information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--e88abdf1-a199-5c86-80c5-317bfbf871a1", "created": "2026-08-09T04:16:47Z", "modified": "2026-08-09T04:16:47Z", "x_ally_original_id": "dat:92d8b8c7-0cde-4440-ae01-6c6fef5524d9", "name": "Geographic location information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68", "name": "Dates of birth" }, { "type": "x-ally-data-exposure", "spec_version": "2.1", "id": "x-ally-data-exposure--33903c08-ae83-5bce-82b4-d2d6b1f03a18", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "exp:f8455633-efda-4012-82b7-3637341d0e72", "name": "Carnival Corporation personal-information exposure" }, { "type": "x-ally-jurisdiction", "spec_version": "2.1", "id": "x-ally-jurisdiction--6f993069-8784-5aa9-80e7-26f143f87028", "created": "2026-08-08T23:58:00Z", "modified": "2026-08-08T23:58:00Z", "x_ally_original_id": "jur:93e7f2a4-c5d7-4e26-a421-fb09ee3218fe", "name": "Texas" }, { "type": "x-ally-legal-proceeding", "spec_version": "2.1", "id": "x-ally-legal-proceeding--9fa2e679-c216-52ec-8f7b-7ae1b2d68f53", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "lgl:e3d787ce-9878-4cf9-b4ea-6d5b1a9e31e1", "name": "Carnival data-security class actions" }, { "type": "x-ally-legal-proceeding", "spec_version": "2.1", "id": "x-ally-legal-proceeding--f7761107-c198-51cc-896f-5d3286817e42", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "lgl:b7567eb7-b24f-4c0a-acb0-35a406289b8f", "name": "Texas Attorney General Carnival investigation" }, { "type": "x-ally-notification", "spec_version": "2.1", "id": "x-ally-notification--a51d80bf-1946-5d7f-8f88-986183983a4a", "created": "2026-08-09T04:58:38Z", "modified": "2026-08-09T04:58:38Z", "x_ally_original_id": "ntf:76085932-ce63-4989-b558-99a91cbb42b9", "name": "May 2026 Carnival Corporation breach notification" } ] }