Paxton opens investigation into Carnival after data breach affecting Texas consumers

Texas Attorney General Ken Paxton has opened an investigation into Carnival Corporation after a breach that allegedly exposed personal information tied to millions of people, including 800,060 Texas consumers.
Texas Attorney General Ken Paxton has opened an investigation into Carnival Corporation after a data breach that allegedly exposed personal information tied to about 6 million people, including 800,060 Texas consumers, according to the Texas attorney general’s office.
Paxton’s office said it is examining whether Carnival adequately protected Texans’ personal information and maintained reasonable security procedures under state law.
What happened
Carnival reported unauthorized access to its systems in April 2026, the source said. Carnival said its information technology security team detected unauthorized activity involving an employee account on April 14, 2026. The company said a threat actor used social-engineering tactics to deceive an employee and gain access to company systems.
The source says the affected data came from Carnival’s cruise and travel operations. It also says the company notified Texas that 800,060 Texas consumers were impacted.
What officials said
Paxton’s office issued a Civil Investigative Demand before announcing the investigation, seeking information about Carnival’s cybersecurity practices, according to the source. The attorney general’s office has not announced any findings or enforcement actions.
Paxton said he is investigating to ensure the company is held accountable for any illegal action and that Texans’ private information is properly secured, the source said. He also said data breaches are serious matters and that his office is committed to protecting Texans’ sensitive personal information.
What happens next
The inquiry remains ongoing. The attorney general’s office has not said whether it will bring enforcement action.
Sources
Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.
View the Web StoryA visual, tap-through version of this reportThis is the AMP version of the article. Read the full article on Atlas Watchline.