Carnival Corporation suffered a major data breach affecting nearly 6 million customers, exposing personal information including passport numbers.