Security notice
Last updated: 21 August 2026
Between 10 and 18 August 2026, an unauthorised third party accessed one of our internal systems and copied data relating to Quarterdeck
We discovered this on 19 August and took immediate action to secure our systems and prevent further access. We have reported the incident to the relevant authorities and are continuing to investigate.
What was affected
This varies by person and by brand, and included some or all of:
- Names, email addresses, phone numbers and addresses
- Passport and identity document details, dates of birth and nationality, collected for crew lists required by port authorities
- Password Recoveries: Password reset codes (all of which had already expired by August 18, 2026).
- Payment records and stored card references
- Plaintext bank account details including account holder names, phone numbers, addresses, account numbers, IBANs, SWIFT/BIC codes, and routing numbers
Card security codes (CVV) were not affected — we never store them. For almost everyone, full card numbers were not affected. We identified a small number of exceptions and are contacting those people directly.
What to do
Everyone: alert to unexpected emails, calls or messages about this incident or your bookings. We will never send you a password reset link you didn’t request, or ask you to reply with card or bank details.
If your passport details were included: watch for anyone using your identity to open accounts or verify themselves. You can report identity fraud to your national police or data protection authority if you find something .
Are you contacting people individually?
Yes — everyone affected for whom we hold a working email address will be notifed via email.