2020 — EasyJet: May 2020 (disclosed), 9.0M records
Data compromised
Emails, travel details, payment cards (2,208)
Technical writeup
May 2020 (disclosed). EasyJet suffered a highly sophisticated cyberattack discovered in January 2020. Email addresses and travel details of ~9 million customers were accessed; 2,208 customers had credit/debit card details including CVV codes stolen. Passport information was not compromised. The airline notified the ICO and NCSC.
Root cause
Sophisticated cyberattack; unauthorized access to customer data.