The group, which includes Scenic Luxury Cruises & Tours, Emerald Cruises and Evergreen Tours, said the breach involved "unauthorised access" to its IT systems.
As per its security protocols, the company has "ring-fenced" its systems to minimise any further impact and launched an investigation into the breach.