The Carnival Corporation said a social engineering attack enabled hackers to access sensitive information, such as passengers' dates of birth and passport numbers.
The men were using a kayak to stay afloat. The Carnival Jubilee crew, which departed from Galveston, brought them on board, where medical staff evaluated them and gave them first aid and food.
The ride operator was assisting a 12-year-old girl onto "The Bullet" ride when a sudden gust of wind lifted the car into the air, officials said.
Carowinds reports the young boy got stuck while trying to steal items from inside the machine.
James Michael Grimes said he treaded water for nearly 20 hours after falling overboard -- battling jelly fish, rip currents and shark-infested waters.
Rescuers haven't been able to determine how long the man was in the water but say it could have been more than 15 hours.