Carnival Cruise Line reached a $1.25 million settlement Wednesday with 45 state attorneys general and the District of Columbia stemming from its 2019 data breach that involved the personal information of 180,000 Carnival employees and customers nationwide.

In March 2020, Carnival, through subsidiaries Holland America Line and Princess Cruises, reported the breach, in which names, addresses, passport numbers, driver’s license numbers, payment card information, health information, and a small number of Social Security numbers were exposed.