Air Europa says customer data may have been compromised in October breach


(Reuters) -Spanish airline Air Europa said on Friday personal data of its customers may have been compromised in a security incident that was detected in October last year.
(Reuters) -Spanish airline Air Europa said on Friday personal data of its customers may have been compromised in a security incident that was detected in October last year.
The company’s investigation showed that name, ID card or passport details, date of birth, telephone number, email address and nationality details could have been leaked, Air Europa told its customers in an email that was shared with Reuters.
The Wall Street Journal first reported the news, but cited the statement to International Consolidated Airlines Group (IAG).
IAG, which has a 20% stake in Air Europa, told Reuters that it “would never email (Air Europa’s) customers directly”.
Madrid-based Air Europa in October suffered a cyber attack on its online payment system that left some of its customers’ credit card details exposed.
The carrier at the time said no other information was exposed without specifying the number of customers affected.
Last year, IAG agreed to pay 400 million euros ($434.48 million) to Spain’s Globalia for the remaining 80% of airline Air Europa it did not already own. The deal has still not closed.
($1 = 0.9206 euros)
(Reporting by Chandni Shah in Bengaluru; Editing by Rashmi Aich and Saumyadeb Chakrabarty)
A data breach occurs when unauthorized individuals gain access to sensitive information, such as personal or financial data, potentially leading to identity theft or fraud.
Cybersecurity refers to the practice of protecting systems, networks, and programs from digital attacks, which aim to access, change, or destroy sensitive information.
Customer data includes any information collected about individuals who purchase or use a company's products or services, such as names, contact details, and transaction history.
Data protection involves safeguarding personal data from misuse, ensuring privacy rights are respected, and complying with regulations like the GDPR.
A cyber attack is a malicious attempt to damage, disrupt, or gain unauthorized access to computer systems, networks, or devices.
Explore more articles in the Top Stories category











