Back Topclassactions

Carnival class action claims cruise line failed to notify customers of data breach

Topclassactions • May 25, 2026

A new class action lawsuit alleges Carnival Corp. — which owns Carnival Cruise Line — failed to notify its customers that their personally identifiable information was stolen in a data breach.

Plaintiff Zachary Pottle filed the class action complaint against Carnival Corp. on April 22 in Florida federal court, alleging violations of state and federal consumer laws.

According to the lawsuit, Carnival failed to notify its customers a data breach that occurred on April 18, 2026. The breach allegedly involved the theft of more than 8.7 million records containing personally identifiable information by the ransomware group ShinyHunters.

Pottle claims Carnival failed to provide timely notice to affected individuals, leaving them at risk of identity theft and fraud. He alleges Carnival failed to adopt reasonable security measures to protect its customers’ PII despite benefiting economically from collecting this information.

The class action lawsuit claims Carnival’s alleged conduct amounts to negligence and violates federal and state statutes.

Pottle says that Carnival’s failure to notify customers of the data breach has caused him to suffer injuries, including the loss of the value of his PII, out-of-pocket expenses related to identity theft prevention and recovery and increased risk of identity theft.

Pottle is looking to represent anyone in the United States who was impacted by the data breach. He seeks certification of the class action, damages and a jury trial.

Recently, Choice Hotels was sued for allegedly failing to properly safeguard and protect the personally identifiable information of its franchisees and franchise applicants.

What do you think of the claims made in this Carnival Cruise data breach lawsuit? Let us know in the .

The plaintiff is represented by Mariya Weekes of Milberg PLLC.

The Carnival Cruise class action lawsuit is Pottle v. Carnival Corp. , Case No. 1:26-cv-22801, in the U.S. District Court for the Southern District of Florida.

Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!

Read More Class Action Lawsuits & Class Action Settlements:

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Carnival Corporation Data Breach Affects Nearly 6 Million Customers Carnival Corporation reported a significant data breach affecting approximately 6 million customers due to a social engineering attack on an employee's account. The breach was detected on April 14, 2026, when unauthorized activity was identified. The attackers, linked to the ShinyHunters group, reportedly accessed sensitive personal information including names, addresses, email addresses, phone numbers, dates of birth, and government-issued identification numbers. Carnival began notifying affected individuals on May 27, 2026, offering two years of complimentary credit monitoring through TransUnion. The company is enhancing its security measures and has engaged third-party experts for further investigation. The breach is part of a larger trend of cyberattacks targeting various organizations, with ShinyHunters known for previous high-profile incidents. Legal actions are being pursued against Carnival for alleged failures in timely notification. 47 sources 69

Extracted Entities

Carnival class action claims cruise line failed to notify customers of data breach

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Companies (1)

Countries (1)

MITRE ATT&CK (2)