Carnival Corp.
Updated Jul 28, 2026
Carnival Data Breach Lawsuit: Case Status
Carnival customers say the company failed to protect and promptly disclose a breach affecting millions of records. No settlement is available yet.
Key facts
- Claim deadline
- TBD
- Potential payment
- Payment varies
- Proof requirement
- No proof
- Status
- Open
Eligibility
Who may qualify?
Check the covered dates, products, locations, and other official terms before you file.
- You booked or took a cruise with Carnival Corporation or one of its affiliated cruise lines — Carnival Cruise Line, Costa Cruises, Holland America Line, P&O Cruises, or Princess Cruises — before April 18, 2026, meaning your personal information was stored in the systems affected by the data breach.
Case overview
What this settlement is about
A proposed class action accuses Carnival Corporation of mishandling the fallout from a data breach that allegedly occurred on April 18, 2026. According to the complaint, personally identifiable information belonging to customers was stolen in a cyberattack allegedly linked to the ShinyHunters ransomware group, and Carnival failed to properly notify those affected. The lawsuit also alleges negligence and violations of state and federal consumer protection laws. Carnival denies any wrongdoing.
Importantly, no settlement has been reached in this case. The matter is still working through the court system and arbitration, with no final decision yet made.
