Air Europa suffers cyberattack and asks customers to cancel their credit cards

10/10/2023

Air Europa detected a security incident of unauthorised access that put its customers' bank card details at risk and would have affected the payment environment for handling purchases via the website.

Following this event, several users received an email from the company warning them and recommending that they cancel their card to avoid unauthorised charges or other fraud. The stolen data were: the card number, the expiry date and the security code (CVV).

The airline assures that the application of the protocol established in its response plan has made it possible to block the security breach and prevent the leakage of new data. According to the airline, all its systems are currently operating normally and guarantee the security of its operations.

[Update 22/03/2024]

Air Europa has issued a new statement to its customers to inform them that during the technical analysis following the cyber-attack in October 2023, the airline has identified that personal data of some of its customers and/or passengers may have been leaked.

The personal data which, according to the communiqué sent on 21 March 2024, were allegedly leaked are the following: name and surname, ID card or passport, Suma frequent flyer code, postal address, date of birth, telephone number, e-mail address and nationality.

The airline says it has not been aware of any fraudulent use of the leaked information.

References