Air Europa has reported a security incident in its computer systems, resulting in a “possible” Unauthorized access to the customer’s bank card details and especially:

• Bank card number ending in 9004.
• Expiry date of said card.
• CVV cards.

In Christian: effective cyber attack which violated the privacy of customers and above all their bank details.

While we always insist that there is no such thing as 100% security and that anyone can suffer a data breach, be it a regular consumer or a large company, it must be said that The airline is among the “commoners” when it comes to hacking and leaking customer data and we can list several attacks against their systems, especially the search for bank details that were later used for fraudulent activities.

Plus Air Europa The Spanish Data Protection Authority issued a fine (AEPD) for failing to stop the security breach, for failing to implement appropriate measures to ensure data security, as well as for late notification of the cyber attack. The one we remember, from 2018, took 41 days to be announced. One would assume that, after previous experiences, the airline had beefed up its computer systems…

Air Europa gap: steps to follow

The airline has apologized for the inconvenience caused to customers and has made the email of its data protection officer (delegadopd@aireuropa.com) available to them for any further clarification or resolution of doubts they may need or for further information on the management of the security breach.

Due to the risk of stolen data being used in card theft and fraud, The company recommends some steps that are common in these incidents:

• Identify the card used to pay on the AIR EUROPA website.
• Contact your banking entity.
• Request cancellation/cancellation/replacement of this card to avoid possible fraudulent use of your information.
• Do not provide personal information, your PIN, name or any other personal information by phone, message or email, even if they identify themselves as your bank.
• Do not click on links that warn you of fraudulent operations. Contact your bank directly through verifiable means.
• Collect any evidence of possible unauthorized use of your card and report it to State Security.