Security News > 2023 > October > Air Europa data breach: Customers warned to cancel credit cards

Spanish airline Air Europa, the country's third-largest airline and a member of the SkyTeam alliance, warned customers on Monday to cancel their credit cards after attackers accessed their card information in a recent data breach.

The credit card details exposed in the breach include card numbers, expiration dates, and the 3-digit CVV code on the back of the payment cards.

Air Europa also warned affected customers to ask their banks to cancel their cards used on the airline's website due to "The risk of card spoofing and fraud" and "To prevent possible fraudulent use."

Two years ago, in March 2021, the Spanish Data Protection Agency also fined €600,000 the airline for violations of the European Union's General Data Protection Regulation and for notifying the privacy watchdog of the data breach more than 40 days later.

The 2021 data breach affected roughly 489,000 individuals, with the attackers gaining access to their contact and bank account details stored in 1,500,000 data records.

While criminals used around 4,000 bank cards' data in fraudulent activities, Air Europa classified the breach as a medium-risk incident and chose not to inform the affected individuals.

News URL

https://www.bleepingcomputer.com/news/security/air-europa-data-breach-customers-warned-to-cancel-credit-cards/