9 Million EasyJet Customers Have Data Stolen In Latest Breach

May 20, 2020

Around 9 million easyJet customers have had their data breached in a ‘sophisticated’ cyber-attack, the airline has announced.

Email addresses and travel details were stolen by cyber-criminals and more than 2,200 customers have also had their credit and debit card details ‘accessed’, including CVV numbers.


easyJet informed the UK’s Information Commissioner’s Office in January 2020 and they are currently investigating the breach. It wasn’t until four months later that easyJet informed its customers.

“People have a right to expect that organisations will handle their personal information securely and responsibly. When that doesn’t happen, we will investigate and take robust action where necessary,” an ICO spokesperson told the BBC.

To justify the length of time it took them to inform customers, easyJet told the BBC: “This was a highly sophisticated attacker. It took time to understand the scope of the attack and to identify who had been impacted.”

“We could only inform people once the investigation had progressed enough that we were able to identify whether any individuals have been affected, then who had been impacted and what information had been accessed.”

Why did the attack happen?

No details were shared about the nature of the attack, the motives, or the reason easyJet’s security measures did not prevent it. It was suggested that hackers were targeting ‘company intellectual property’ rather than information that could be used in identity theft, but no evidence was given to support that claim.

“We are advising customers to be cautious of any communications purporting to come from easyJet or easyJet Holidays,” it warned.

The ICO warned easyJet customers to be extra cautious of phishing attacks during its investigation period.

The effects of a data breach

Personal details can be used by cyber criminals to access bank accounts, open new accounts, and take out loans in the victims’ names. They may also use your information to make fraudulent purchases or sell on to other criminals.

Firm Update

Please be advised that we are no longer accepting claims for the easyJet data breach litigation.

We are aware that other firms are still taking on new clients, and we would recommend that you reach out to them should you still wish to bring a claim.

Thank you for your understanding.

More Press

Dead River Podcast Artwork
Liz Bonnin hosts Dead River - a new podcast on Mariana dam disaster 
Liz Bonnin hosts a new podcast titled Dead River which shares the story of the Mariana dam disaster.  
Read More
Pogust Goodhead Sydney Australia
Pogust Goodhead launches office in Sydney, Australia
We are pleased to announce the opening of our new office in Sydney’s legal district to serve as a base to launch new claims against Australian corporations...
Read More
My Diesel Claim - Emissions scandal
Ford to face trial alongside Mercedes for alleged emissions cheating 
Ford will join Mercedes in the first set of car company cases to go to trial over alleged emissions cheating and a suite of manufacturers now face claims...
Read More