[Fergal]

As if the airline industry has not suffered enough in recent times, the British low cost airline has suffered a major data breach from a cyber attack, exposing travel details and email addresses of approx. 9 million customers.

Source The Hacker News

[CyberFreak]

I saw this earlier but the story I read about it on BBC.co.uk had the following disturbing details in it:

EasyJet first became aware of the attack in January.

It told the BBC that it was only able to notify customers whose credit card details were stolen in early April.

In otherwords it has taken then ~3 months from when they found out to notify users whose credit card details were stolen and then atleast another month to alert other people affect. We are talking ~4 months here. That is very bad.

[Fergal]

3 months from when they found out to notify users whose credit card details were stolen and then atleast another month to alert other people

That really is quite shocking, there are laws that require companies to report data breaches, within a certain time period, I wonder if these laws were fully complied with in this instance.

[mrki444]

From this reasons GDPR law was bring. Now users can ask company to delete all their data. This security breach is very dangerous since all informations are correct there.

[docxdrl]

As if the airline industry has not suffered enough in recent times, the British low cost airline has suffered a major data breach from a cyber attack, exposing travel details and email addresses of approx. 9 million customers.

Source The Hacker News

This is not a good thing for hackers to do.