Carnival Cruise confirms data breach affecting nearly 6 million people