Canadians could be part of class-action lawsuit filed against popular cruise company
Canadians whose personal information was compromised could be included in a new class-action lawsuit filed against Carnival Corporation.
Carnival Corporation, which operates Carnival Cruise Line, Princess Cruises, Holland America, and others, has been hit with a proposed class-action lawsuit for alleged negligence that resulted in an April 14, 2026, data breach affecting millions of individuals. Law firm Slater Vecchio announced that it filed the lawsuit on behalf of affected Canadians in the Supreme Court of British Columbia on June 17.
Another lawsuit was filed in the U.S., alleging that Carnival failed to notify its customers that their personal information was stolen in a data breach.
The allegations
agustin.photo/Shutterstock
According to Carnival, it had been targeted in a cybersecurity incident, which its IT security team discovered on April 14.
“An unauthorized actor used social engineering to deceive an employee to gain a limited portion of the company’s IT system,” stated a May 27, 2026, notice on the company’s website, adding that it was informing affected individuals.
The U.S. lawsuit alleges that up to 8.7 million records may have been exposed. According to the lawsuit filed in Canada, data that may have been accessed by an unauthorized third party may include (but not limited to) full names, mailing addresses, email addresses, phone numbers, dates of birth, and in some cases, government-issued IDs, including driver’s licence numbers and passport numbers.
The proposed lawsuit claims that Carnival failed to take adequate steps to protect its customers’ personal information despite similar incidents occurring in 2019 and between 2020 and 2021.
The lawsuit was brought forward by a B.C. resident after she was notified that her personal information was involved in the data breach detected in April. The document states that customers have a reasonable expectation that their data would be safe, and alleges that Carnival was negligent about implementing or maintaining “adequate safeguards.”
Carnival faces allegations that it failed to comply with several provincial privacy laws and the Personal Information Protection and Electronic Documents Act (PIPEDA), which sets rules for how private sector organizations collect, use, and disclose personal information.
“Privacy rights in Canada carry quasi-constitutional weight, and the obligations they impose on companies like Carnival are not aspirational — they are mandatory,” said Anthony Vecchio, KC, a partner with Slater Vecchio LLP. “This case is about ensuring affected Canadians have a pathway to seek accountability and compensation.”
Wangkun Jia/Shutterstock
The lawsuit alleges that affected Canadians “suffered psychological, financial, and other harm.” It adds that those affected by the data breach “live under a continuing and reasonable fear of identity theft, fraud, and extortion.”
It also points out that affected Americans were offered a complimentary two-year credit-monitoring subscription through TransUnion, while Canadians were not.
“Protecting the privacy and security of personal data is a priority for us, and we’ve added new layers of security and monitoring on top of the comprehensive protections already in place,” a Carnival spokesperson stated in an email to Daily Hive on June 3.
Daily Hive has reached out to Carnival about the recent allegations, but has not yet received a response.
Are you eligible?
The proposed lawsuit was filed on behalf of Canadians who were notified that their personal information was involved in the data breach. It also includes a subclass of Canadians who claim to have suffered financial losses “due to the misuse of their personal information” accessed in the data breach.
How much could you receive?
There’s no amount stated at this point; however, the lawsuit is seeking general and special damages for the company’s alleged negligence.
What should you do next?
For now, the lawsuit still has to be authorized by the court to proceed as a class action. If you’re eligible, you don’t have to do anything, but you can keep up with updates by filling out the online contact form.