Margaritaville at Sea Data Breach Lawsuit: Two Federal Suits, No Settlement
Active Litigation
On September 23, 2025 the ransomware group Lynx claimed it had hit Margaritaville at Sea, the Florida cruise line that sails the Paradise and the Islander. Within weeks, two proposed class actions were filed in federal court in Florida. As of October 2026 there is no settlement, no fund and no claim form — and no public count of how many passengers were affected.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What the Lawsuits Say Happened
Margaritaville at Sea is the trade name of Classica Cruise Operator Ltd., an Orlando-based company incorporated in 2018 that operated as Bahamas Paradise Cruise Line until its rebrand in May 2022. To book and board, passengers hand over identity, passport and payment details — and sometimes health information.
According to the complaints, the company experienced a data breach on or around September 23, 2025, and the ransomware group Lynx claimed responsibility. On its leak site the group posted: “The full leak will be published unless Margaritaville at Sea engages in proper negotiations.” That is the attacker's claim, not a confirmed fact.
The lawsuit alleges the attackers took names, dates of birth, addresses, passport details, financial information, Social Security numbers and health data. It also alleges the company was slow to notify customers and “has still not informed” the named plaintiff of key details. None of these allegations has been proven, and the company has not published a breach notice we could find.
Case details
Two proposed class actions are pending in the U.S. District Court for the Middle District of Florida, which covers Orlando, where the company is based:
Love v. Classica Cruise Operator, Ltd, Inc. d/b/a Margaritaville at Sea, No. 6:25-cv-02076, filed October 28, 2025. The 58-page complaint pleads negligence and negligence per se, breach of implied contract, breach of fiduciary duty and unjust enrichment, on behalf of all U.S. residents affected by the breach.
Seaberg v. Classica Cruise Operator Ltd. Inc., No. 6:25-cv-02072, also filed in late 2025. It pleads negligence, negligence per se, breach of implied contract and unjust enrichment, seeks a nationwide class, and asks for a jury trial, injunctive relief and damages.
Status: Two Pending Suits, No Settlement
What is also missing is a headcount. We found no notice to a state attorney general stating how many people were affected; a public breach tracker lists the leak size as “Unknown.” If a regulator filing appears, it will be the first official number.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Would Be in the Proposed Classes
The Love complaint seeks to represent all U.S. residents affected by the September 23, 2025 breach; the Seaberg complaint seeks a nationwide class of people whose information was compromised. In practice that means people who booked or sailed with Margaritaville at Sea (or its predecessor, Bahamas Paradise Cruise Line) and whose records the company held.
You do not sign up anywhere. Under Rule 23, if a class is certified or a settlement is reached, a court-appointed administrator notifies class members directly. Keep any letter or email from the cruise line about a security incident — it is the best proof that your data was involved.
What a Case Like This Pays
For context only, not a prediction: data-breach settlements involving Social Security and passport numbers have usually offered reimbursement of documented losses, a smaller flat payment for people who document nothing, and credit monitoring. Our data breach settlement calculator shows what comparable cases have paid.
Margaritaville at Sea Breach Timeline
May 2022 — Bahamas Paradise Becomes Margaritaville at Sea
Classica Cruise Operator, incorporated in 2018, rebrands its cruise line under the Margaritaville name. It later adds a second ship, the Islander.
September 23, 2025 — Lynx Claims the Attack
The ransomware group Lynx lists margaritavilleatsea.com on its leak site and threatens to publish data unless the company negotiates.
October 28, 2025 — First Class Action
Love v. Classica Cruise Operator, No. 6:25-cv-02076, is filed in the Middle District of Florida, alleging exposure of passport, Social Security and health data.
Late 2025 — A Second Suit
Seaberg v. Classica Cruise Operator, No. 6:25-cv-02072, is filed in the same court, seeking a nationwide class.
2026 — Still No Official Headcount
We found no regulator filing stating how many people were affected and no public breach notice from the company.
October 2026 — Pending, No Settlement
Both suits remain without a settlement, fund, claim form or deadline as far as public records show.
Three Things to Watch For
A breach with passport numbers, no official headcount and no claim form leaves room for imposters:
“Claim your Margaritaville at Sea settlement”
There is no settlement and no claims site. A page asking for your passport or Social Security number to “register” is collecting data, not filing a claim.
Fake cruise refund or rebooking offers
Stolen booking data lets a scammer quote your sailing date or cabin. Treat any call, text or email about a “breach refund” or free cruise as suspect and contact the cruise line through its own website.
“Pay to remove your data from the dark web”
Leak-site threats are used to frighten victims into paying for removal services. Nobody can pull data back off a criminal leak site; a credit freeze is free and actually works.
Margaritaville at Sea Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
What happened in the Margaritaville at Sea data breach?
According to the lawsuits, the cruise line experienced a breach on or around September 23, 2025, and the ransomware group Lynx claimed responsibility and threatened to leak the data. The company has not published details we could find.
Is there a Margaritaville at Sea data breach lawsuit?
Yes, two. Love v. Classica Cruise Operator, No. 6:25-cv-02076 (filed October 28, 2025), and Seaberg v. Classica Cruise Operator, No. 6:25-cv-02072, both in the U.S. District Court for the Middle District of Florida. Both are proposed class actions.
What data was exposed?
The Love complaint alleges names, dates of birth, addresses, passport details, financial information, Social Security numbers and health data. These are allegations; a company notice letter, if you received one, states which fields applied to you.
How many people were affected?
Unknown. As of October 2026 we found no notice to a state attorney general with a headcount, and a breach tracker lists the leak size as unknown.
How much compensation will I get for a data breach?
From this breach, nothing yet — there is no settlement, no fund and no claim form. If a settlement comes, the amount depends on the fund size and how many people claim. Our calculator shows what comparable cases have paid.
Did Carnival cruises get hacked?
Yes, but that is a separate breach at a different company. Carnival told the Maine Attorney General's Office that 5,995,277 people were affected; see our Carnival data breach lawsuit page. This page covers only Margaritaville at Sea.
How do I check if I got data breached?
Look for a letter or email from Margaritaville at Sea or Classica Cruise Operator about a security incident. If you sailed with the line or its predecessor, Bahamas Paradise Cruise Line, and received nothing, that is not proof either way — no public notice has been found.
What is worth doing right now?
Freeze your credit at all three bureaus — free and reversible. If your passport details were on file, watch for misuse and report a compromised passport to the State Department. Keep any notice you receive.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Carnival Data Breach LawsuitA separate cruise-line breach: different company, different case
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Data Breach Settlement CalculatorWhat comparable breach settlements have paid per person
- Class Action Payout CalculatorEstimate a per-person share once a fund exists