The incident was caused by a social engineering attack targeting an employee device. 

The incident was caused by a social engineering attack targeting an employee device. 

Source: cybersecurity insiders
Source Link: https://www.securitymagazine.com/articles/102327-6m-impacted-by-carnival-cruise-data-breach