Carnival Corporation data breach affects 5.9 million customers