Carnival Corporation & plc, the world’s largest cruise company, recently experienced a data breach affecting multiple cruise lines, including Carnival Cruise Line, Costa Cruises, Holland America Line, P&O Cruises, and Princess Cruise. A hacking group known as “ShinyHunters” claims it accessed approximately 8.7 million customer records in or around April 2026. The information reportedly exposed may include names, passport numbers, payment card and banking information, booking histories, loyalty program details, current cruise reservations, dates of birth, home addresses, and account passwords.
Labaton Keller Sucharow is investigating potential arbitration claims under the California Consumer Privacy Act and the California Privacy Rights Act (“CCPA/CPRA”) and other state unfair and deceptive trade practices (“UDAP”) laws on behalf of individuals whose personal or financial information may have been exposed in the alleged breach involving Carnival and its affiliated cruise lines.


