What happened in the Holland America data breach?

Holland America reported that unauthorized access occurred after a social engineering attack involving a single user account. The company has said certain personal information was illegally accessed and that affected individuals are being notified.

How many people were affected by the Holland America data breach?

Reports indicate that nearly 6 million people were affected by the Holland America data breach. The exact information involved may vary by person.

What information may have been exposed?

Potentially exposed information may include names, addresses, email addresses, phone numbers, dates of birth, and government-issued identification numbers, such as driver’s license numbers or passport numbers. Reports involving Holland America’s data also referenced loyalty program details and other personal information.

Why is exposed travel data dangerous?

Travel-related data can help scammers create more convincing messages. For example, a fake email may mention cruise loyalty points, a refund, a cabin upgrade, an upcoming trip, or an account issue. These details can make scams feel legitimate.

What should I do if I receive a breach notice?

Save a copy of the notice and read it carefully. It may explain what information was involved and whether Holland America is offering credit monitoring or other support. Avoid clicking links in unexpected emails or texts. Instead, go directly to the official company website.

What evidence should I save?

You should save your breach notice, suspicious emails or texts, screenshots of fraudulent activity, bank or credit card statements showing unauthorized charges, credit reports, identity theft reports, and any records showing time or money spent responding to the breach.

Can I have a case if I have not experienced identity theft yet?

Possibly. Some data breach claims may involve the exposure of sensitive personal information, time spent protecting yourself, out-of-pocket costs, increased risk of future fraud, or other harms. Eligibility depends on the facts of your situation.

What if my passport or driver’s license number was exposed?

Government-issued identification numbers can create additional risk because they may be used in identity verification attempts. If your passport or driver’s license number was involved, you may want to take extra steps to monitor for suspicious activity and speak with an attorney about your legal options.

How much does it cost to hire Morgan & Morgan?

Morgan & Morgan works on a contingency fee basis. That means the Fee Is Free®, and you pay nothing unless we win your case.Fill out a free case evaluation today to learn more.

Why should I choose Morgan & Morgan for a Holland America data breach lawsuit?

Morgan & Morgan is America’s Largest Injury Law Firm, with [ftp_global_var:years] years of experience handling complex claims involving corporate accountability and consumer harm. Our attorneys have recovered $[ftp_global_var:total_funds_recovered_count] billion for clients and have the resources to take on large corporations.When companies collect sensitive personal information, they have a responsibility to protect it. If your information was exposed in the Holland America data breach, Morgan & Morgan may be able to help. Fill out a free case evaluation today.

“The Fee is Free unless you win.”

Dan Morgan Managing Partner

Play Video

Affected by the Holland America Data Breach?

Holland America reported a data breach affecting millions of people. If you were a Holland America customer whose personal information was exposed, you may have legal options. Morgan & Morgan is reviewing claims nationwide.

See if you qualify

The attorney shown above may not be licensed in your state. To find an attorney licensed in your area, please visit our attorney page.

“The Fee is Free unless you win.”

Dan Morgan Managing Partner

Play Video

The attorney shown above may not be licensed in your state. To find an attorney licensed in your area, please visit our attorney page.

See if you qualify

Meet Our Holland America Data Breach Attorneys

Morgan & Morgan’s data breach attorneys help individuals whose personal information was exposed due to alleged corporate negligence. Backed by the resources of America’s Largest Injury Law Firm, we fight to hold companies accountable for failing to protect sensitive data.

U. Seth Ottensoser

Read Bio

The attorneys shown in these photos may not be licensed in your state. To find an attorney licensed in your area, please visit our attorney page.

Key Takeaways

Holland America Data Breach Exposed Personal Information

Holland America confirmed a data breach that reportedly exposed personal information belonging to nearly 6 million people, including data potentially linked to its Mariner Society loyalty program.

Stolen Data May Increase the Risk of Fraud and Scams

Cybercriminals can use exposed personal information to create convincing phishing emails, text messages, phone calls, or fake websites designed to steal additional information or money.

Exposed Personal Information Can Create Long-Term Risks

Depending on the information involved, affected individuals may face an increased risk of identity theft, financial fraud, or other misuse of their personal data.

Learn Whether You May Have a Holland America Data Breach Claim

If your personal information was exposed in the Holland America data breach, Morgan & Morgan can help you understand your legal options and determine whether you may be entitled to compensation.

Do I Have a Case?

You Were a Holland America Customer

Current claims may focus on people whose information was connected to Holland America’s Mariner Society loyalty program or related cruise customer records.

Your Personal Information Was Exposed

Potentially exposed information may include your name, date of birth, email address, phone number, address, loyalty program details, driver’s license number, passport number, or other identifying information.

You Received a Data Breach Notice

If Holland America notified you that your information was involved, save that notice. It may help explain what information was exposed and what protections were offered.

You Experienced Fraud, Scams, or Identity Theft Concerns

Some affected customers may experience suspicious emails, fake cruise messages, unauthorized account activity, fraudulent charges, new accounts opened in their name, or attempts to misuse their identity documents.

You Spent Time or Money Protecting Yourself

Data breaches can force people to spend hours changing passwords, freezing credit, monitoring accounts, disputing charges, replacing identification documents, or signing up for identity theft protection.

Unsure Whether Your Information Was Involved?

If you are unsure whether your information may be connected to the Holland America data breach, a free case evaluation can help you better understand your legal options.

Get Started

Holland America Data Breach Lawsuit at a Glance

Alleged Security Issue

Holland America reported that unauthorized access occurred after a social engineering attack involving a single user account. Data breach claims may focus on whether the company had proper cybersecurity protections, employee training, monitoring systems, and response procedures in place.

Holland America Data

Reports indicate that leaked data may have included information tied to Holland America’s loyalty program, the Mariner Society.

Personal Information Potentially Exposed

Holland America has reported that impacted information may vary by person but could include names, addresses, email addresses, phone numbers, dates of birth, and government-issued identification numbers, including driver’s license numbers or passport numbers.

Why This Risk Matters

Even if credit card numbers were not involved, exposed personal information can still create serious risks. Scammers may use cruise-related details to send fake messages about loyalty points, refunds, cabin upgrades, account verification, travel changes, or special offers.

Potential Harm to Customers

People affected by data breaches may face phishing attempts, identity theft, fraudulent accounts, unauthorized charges, credit issues, and the time-consuming process of protecting their identity after personal information is exposed.

Fighting For the People

Backed by America’s Largest Injury Law Firm.

$35 Billion
Recovered for clients
nationwide
700,000+
Clients and families
served
1,100+
Attorneys across
the country
1
Click may change your life

Your case isn't just another file to us. It's your life, your future, and your family. And we take that personally.

Dan Morgan

Managing Partner, Morgan & Morgan

Read Bio

The attorney featured above is licensed in Florida. For a full list of attorneys in your state please visit our attorney page.
Results may vary depending on your particular facts and legal circumstances.

The Fee is Free®

Only pay if we win.
Contact us 24/7.

It's Easy to Get Started

Provide a few simple details about your injury and our team will take it from there.

By submitting my phone number above I authorize Morgan & Morgan, and its service providers, to deliver calls including using an automatic telephone dialing system or artificial or prerecorded voice, to the number submitted. Consent is not a condition to receive services. Msg frequency varies. Msg & data rates may apply. Upon receipt of any message, reply STOP to unsubscribe.

By submitting this form, you agree to our Terms & acknowledge our privacy policy.

What Compensation May Cover

Identity Theft Losses

Compensation may help address losses related to identity theft, fraudulent accounts, unauthorized transactions, or misuse of personal information.

Credit Monitoring and Identity Protection Costs

Affected customers may need credit monitoring, identity theft protection, fraud alerts, or other tools to help reduce the risk of future harm.

Time Spent Responding to the Breach

Data breaches can force people to spend significant time changing passwords, monitoring accounts, freezing credit, contacting banks, and protecting their identity.

Out-of-Pocket Expenses

Customers may face costs related to replacing identification documents, mailing records, making phone calls, purchasing identity protection services, or correcting fraudulent activity.

Emotional Distress

The exposure of sensitive personal information can cause anxiety, stress, frustration, and fear about future misuse.

Future Risk of Fraud

Once personal information is exposed, customers may continue facing risks from phishing, scams, account takeover attempts, and identity theft.

Common Data Breach Harms and Risks

Phishing Emails and Texts

Scammers may send fake cruise-related messages about refunds, loyalty points, cabin upgrades, cancellations, or account verification to trick people into clicking links or sharing more information.

Identity Theft

If personal information is exposed, criminals may try to open accounts, apply for credit, file fraudulent claims, or impersonate affected customers.

Misuse of Passport or Driver’s License Numbers

Government-issued identification numbers can create serious concerns, especially if scammers use them to attempt identity verification or create fake documents.

Account Takeover Attempts

Exposed email addresses, phone numbers, birth dates, or loyalty program details may help criminals try to access travel, financial, or online accounts.

Financial Fraud

Some affected individuals may notice suspicious charges, new accounts, small test transactions, or attempts to use their information for financial gain.

Emotional Stress and Lost Time

Data breach victims may spend hours protecting themselves and may experience ongoing worry about how their information could be used in the future.

FAQ

Reviewed by U. Seth Ottensoser, Attorney at Morgan & Morgan, on June 24, 2026.

What happened in the Holland America data breach?
Holland America reported that unauthorized access occurred after a social engineering attack involving a single user account. The company has said certain personal information was illegally accessed and that affected individuals are being notified.
How many people were affected by the Holland America data breach?
Reports indicate that nearly 6 million people were affected by the Holland America data breach. The exact information involved may vary by person.
What information may have been exposed?
Potentially exposed information may include names, addresses, email addresses, phone numbers, dates of birth, and government-issued identification numbers, such as driver’s license numbers or passport numbers. Reports involving Holland America’s data also referenced loyalty program details and other personal information.
Why is exposed travel data dangerous?
Travel-related data can help scammers create more convincing messages. For example, a fake email may mention cruise loyalty points, a refund, a cabin upgrade, an upcoming trip, or an account issue. These details can make scams feel legitimate.
What should I do if I receive a breach notice?
Save a copy of the notice and read it carefully. It may explain what information was involved and whether Holland America is offering credit monitoring or other support. Avoid clicking links in unexpected emails or texts. Instead, go directly to the official company website.
What evidence should I save?
You should save your breach notice, suspicious emails or texts, screenshots of fraudulent activity, bank or credit card statements showing unauthorized charges, credit reports, identity theft reports, and any records showing time or money spent responding to the breach.
Can I have a case if I have not experienced identity theft yet?
Possibly. Some data breach claims may involve the exposure of sensitive personal information, time spent protecting yourself, out-of-pocket costs, increased risk of future fraud, or other harms. Eligibility depends on the facts of your situation.
What if my passport or driver’s license number was exposed?
Government-issued identification numbers can create additional risk because they may be used in identity verification attempts. If your passport or driver’s license number was involved, you may want to take extra steps to monitor for suspicious activity and speak with an attorney about your legal options.
How much does it cost to hire Morgan & Morgan?
Morgan & Morgan works on a contingency fee basis. That means the Fee Is Free®, and you pay nothing unless we win your case.
Fill out a free case evaluation today to learn more.
Why should I choose Morgan & Morgan for a Holland America data breach lawsuit?
Morgan & Morgan is America’s Largest Injury Law Firm, with 35 years of experience handling complex claims involving corporate accountability and consumer harm. Our attorneys have recovered $35 billion for clients and have the resources to take on large corporations.
When companies collect sensitive personal information, they have a responsibility to protect it. If your information was exposed in the Holland America data breach, Morgan & Morgan may be able to help. Fill out a free case evaluation today.