ShinyHunters claim they have cruise giant Carnival's booty as 7.5M emails surface

Summary

The hacking group ShinyHunters claims to have obtained and is leaking 7.5 million unique email addresses belonging to a Carnival Corporation subsidiary. The data breach has been flagged by the popular data breach checking service Have I Been Pwned, confirming the large scale of the alleged leak.

IFF Assessment

FOE

This is bad news for defenders as it represents a significant data breach affecting millions of individuals, potentially leading to phishing attacks and identity theft.

Defender Context

This incident highlights the ongoing threat of large-scale data breaches from threat actors like ShinyHunters, who often exfiltrate and leak sensitive customer information. Defenders should be aware of such leaks and prepare for potential downstream attacks targeting affected individuals through phishing or credential stuffing campaigns.

Read Full Story →