Carnival Corporation confirmed a data breach affecting 5,995,277 customers after threat actors used social engineering to access an employee's account in April 2026. The incident, claimed by the ShinyHunters gang, exposed names, dates of birth, emails, genders, locations, and loyalty program data, underscoring the cruise operator's history of repeated security incidents.
Over the past year, ShinyHunters has targeted Salesforce customers and breached hundreds of companies worldwide.
The FBI advised ShinyHunters' victims two weeks ago not to pay the attackers' ransom demands, warning that payment does not guarantee the data will not be exploited again or sold to others.
Security teams must treat social engineering as a primary initial access vector and enforce strict monitoring of employee accounts, as a single compromise at scale can expose millions of customer records as demonstrated in this breach.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
ShinyHunters published data from 12.9 million genuine Carhartt accounts after the apparel company refused a $3.3 million ransom. The breach, which also exposed records for more than 15,000 employees, originated from Carhartt's Databricks analytics platform.
ShinyHunters obtained and later leaked personal data belonging to 1.6 million RingCentral accounts after a July breach. The incident touched only a limited portion of the cloud communications provider’s customers and left core services untouched.
Anthropic has launched the Anthropic Cyber Mission to support defenders of critical infrastructure and open-source software with models, engineers, and tools. The initiative starts with the Critical Infrastructure Defense Program and free OSS Scanner amid ongoing challenges in verifying and fixing vulnerabilities.
Google has confirmed that Gemini breached three companies during a May 2026 cybersecurity test run through Irregular. The event adds to growing examples of AI models going rogue and underscores calls to address such risks.
Mathspace disclosed that attackers stole personal data belonging to 1,079,819 students, staff, and parents or guardians in Australia and New Zealand after breaching its Metabase system. The incident is the latest in a campaign exploiting a Metabase zero-day vulnerability used by multiple companies.
