Spanish airline Air Europa, the country's third-largest airline, warned customers to cancel their credit cards following a cyberattack on the company’s online payment system.
The credit card details exposed in the breach include card numbers, expiration dates, and the 3-digit CVV (Card Verification Value) code on the back of the payment cards.
No other data has been exposed, the airline said.
In an email sent to customers, the company said it notified the relevant financial institutions and that “there is no evidence the breach was ultimately used to commit fraud.”
Air Europa didn’t say how many customers were affected.
In 2021, Air Europa was fined €600,000 for failure to prevent a data breach that affected around 489,000 individuals and 1,500,000 data records.