The Carnival Corporation said a social engineering attack enabled hackers to access sensitive information, such as passengers' dates of birth and passport numbers.
Iranian-affiliated cyber actors and hacktivist groups "may still conduct malicious cyber activity," according to a joint bulletin from U.S. law enforcement agencies.
Aflac says that it has identified suspicious activity on its network in the U.S. that may impact Social Security numbers and other personal information.
WCPSS says personal data for current and former students and staff was accessed.
The "major" breach was achieved by gaining access to a third party cybersecurity service.
Despite private investigators tracking down the scammers who stole the money, law enforcement agencies aren't charging the people involved.