Key developments
Carnival notifies nearly 6 million customers
Complex and AOL reported that Carnival Corporation notified U.S. customers after an April social-engineering intrusion compromised an employee account and exposed personal data. The company says 5,995,277 people were affected, with data including names, addresses, birth dates, phone numbers, and government ID numbers; email notices began May 27 and eligible domestic travelers are being offered two years of TransUnion credit monitoring.
Why it matters
It affects millions of travelers and creates immediate identity-theft risk.
Sources & driving stories
COMPLEX
Complex coverageAOL
Aol coverageCalifornia sues 23andMe over 2023 breach
Bloomberg Law reported California filed suit against the company formerly known as 23andMe over its 2023 breach, which allegedly exposed personal information belonging to nearly 7 million users. The bankruptcy plan administrator then moved in Missouri federal court to block the case, arguing the claims belong in the bankruptcy proceeding and fall under the plan's jurisdiction.
Why it matters
It could determine whether breach claims are handled in state court or bankruptcy court.
Sources & driving stories
BLOOMBERG LAW
Bloomberg Law coverageMalaysia begins enforcing teen social media ban
Newsmax reported Malaysia began enforcing age-verification rules that bar children under 16 from creating social media accounts. Platforms with at least 8 million users, including Facebook, Instagram, TikTok, and YouTube, must comply or face penalties up to 10 million ringgit, and privacy concerns have centered on possible government-ID checks.
Why it matters
It could set a privacy-sensitive precedent for how platforms verify age at scale.
Sources & driving stories
NEWSMAX · Eileen Ng
Newsmax coverageWorth noting
WORTH NOTING
Plaza Home Mortgage breach disclosed
It adds another sensitive consumer-data exposure, including Social Security numbers and mortgage records, from a February intrusion that was only notified on May 29.
WORTH NOTING
Charter breach exposed 4.9 million emails
The Check Point report broadens the week's breach picture and says names, phone numbers, addresses, and employee directory records may also be involved.
Still unclear
OPEN QUESTION
Will the 23andMe suit stay in bankruptcy court?
That decision will shape whether California can pursue the breach claims in state court or whether the bankruptcy plan controls the dispute.
OPEN QUESTION
What age-verification data will Malaysia allow?
Compliance will determine whether platforms can meet the new rules without collecting or retaining government IDs from minors.