Airline EasyJet has been hit by a large data breach. Malicious people have access to the data of 9 million customers. This includes email addresses and travel plans.
The perpetrators also looted credit card information from 2208 customers, EasyJet said on Tuesday. Passport data would not have been stolen.
It is not known by whom the robbery was carried out, but easyJet speaks of “an attack from a very advanced source”.
According to the airline, there are no indications that personal information has been misused. Travel plan information can be used for phishing, where people are sent harmful but real-looking links.
EasyJet says it has already contacted the people whose credit card data was stolen, and will inform the others in the coming days.
“If we don’t contact you, there will be no access to your information,” easyJet said.
The company says it has notified the UK government’s cybersecurity centre and the UK privacy watchdog.