Airline Air Europa acknowledges data breach of customer credit card details

Air Europa reports that customer credit card details have been stolen in a cyber attack. The Spanish airline advises all affected customers in an email to cancel the credit card used and request a new debit card.

The company has confirmed the data breach Reuters, but does not reveal how many potential victims are involved. Air Europa emphasizes that ‘no evidence has been found to indicate that data fraud has been committed’. However, those affected are advised to apply for a new credit card. The email also expressly advises victims not to give their PIN code to parties that ask for it. Among other things, credit card numbers, expiration dates and the 3-digit verification codes on the back of credit cards were revealed by the data breach.

It is not the first time that Air Europa has been involved in such an incident. In 2021, the company received a GDPR fine of 600,000 euros for late reporting of a data breach in which the credit card details of 489,000 customers were revealed. The airline informed the Spanish authorities about the incident after 41 days, while according to the GDPR this must be done within 72 hours. Those affected were not informed about this incident at the time.