Proposed Class Action Filed Against Carnival and Holland America Over Data Breach Affecting Canadians

Slater Vecchio LLP has filed a proposed class action in the Supreme Court of British Columbia against Carnival Corporation and Holland America Line Inc. (collectively, “Carnival”) on behalf of Canadians who were notified by or on behalf of Carnival that their personal information was involved in the data breach disclosed publicly on or about May 27, 2026.

On April 10, 2026, an unauthorized third party gained access to a portion of Carnival’s IT systems. Carnival identified the unauthorized activity on April 14 and later determined, on April 22, that customer personal information had been copied. The breach was publicly disclosed on May 27, 2026.

Carnival has confirmed that the personal information compromised in the breach may include names, addresses, email addresses, phone numbers, dates of birth, and, for some individuals, government-issued identification numbers including driver’s licence and passport numbers.

“Privacy rights in Canada carry quasi-constitutional weight, and the obligations they impose on companies like Carnival are not aspirational – they are mandatory,” said Anthony Vecchio, KC, a partner with Slater Vecchio LLP. “This case is about ensuring affected Canadians have a pathway to seek accountability and compensation.”

To learn more or register for updates regarding the proposed class action, please complete the contact form on Slater Vecchio LLP’s website.