Cyberattack on Air Europa exposes customers’ bank details

Cyberattack on Air Europa exposes customers’ bank details

Spanish airline Air Europa, the country's third-largest airline, warned customers to cancel their credit cards following a cyberattack on the company’s online payment system.

The credit card details exposed in the breach include card numbers, expiration dates, and the 3-digit CVV (Card Verification Value) code on the back of the payment cards.

No other data has been exposed, the airline said.

In an email sent to customers, the company said it notified the relevant financial institutions and that “there is no evidence the breach was ultimately used to commit fraud.”

Air Europa didn’t say how many customers were affected.

In 2021, Air Europa was fined €600,000 for failure to prevent a data breach that affected around 489,000 individuals and 1,500,000 data records.

Back to the list

Latest Posts

Cyber Security Week in Review: June 6, 2025

Cyber Security Week in Review: June 6, 2025

In brief: a critical vBulletin bug is being exploited in the wild, new destructive PathWiper malware targets Ukraine, and more.
6 June 2025
New PathWiper malware targets critical infrastructure in Ukraine

New PathWiper malware targets critical infrastructure in Ukraine

PathWiper shares several characteristics with Sandworm's HermeticWiper, which was used in attacks against Ukraine in 2022.
5 June 2025
US seizes 145 domains linked to BidenCash carding forum

US seizes 145 domains linked to BidenCash carding forum

It is estimated that the operation generated more than $17 million in revenue since launching in March 2022.
5 June 2025