In a cyberattack targeting EasyJet, the private data of customers who booked flights between 17 October 2019 to 4 March 2020, was compromised.
Despite EasyJet’s attempts to reassure those affected, numerous individuals have fallen victim to fraudulent transactions, scams, or suffered mental health repercussions stemming from the breach. Many data protection experts believe that lax security measures at EasyJet allowed the breach to happen.
Despite being aware of the hack in January 2020, EasyJet neglected to notify all affected customers until late May. This failure to inform individuals that their data might be compromised put them at additional risk throughout those five months.
EasyJet attempted to justify the delay by arguing that there was no evidence of the stolen data being exploited by criminals. However, by withholding information about the breach and depriving individuals of the chance to bolster their security measures promptly, lawyers claim that EasyJet inadvertently heightened the risk of the stolen data being weaponised.
Are you affected by the EasyJet data breach?
The EasyJet data breach affected over nine million people, making it one of the UK’s biggest ever data privacy failures. A further 2,000 plus customers had their credit card details stolen in the cyberattack.
EasyJet has contacted all affected customers and if you have received this notification, you are a victim of the EasyJet data breach.
What to do if your data was stolen in the cyberattack
There are a few things you can do to protect yourself, and your data protection rights.
Review your security measures
If you are a victim of a data breach, you should always review your passwords/logins, update your software, keep an eye of your accounts and credit score, and be vigilant against possible phishing attacks. While the EasyJet data breach happened a few years ago, stolen data is often used in batches, so it can take a long time for the full impact of a breach to become known. It is good practice to regularly review and update your data security, even if you haven’t been part of a breach.
Make a report to the Information Commissioner’s Office (ICO)
The ICO is the UK’s data protection regulator. If an organisation has not looked after your data correctly you should make a complaint to the ICO. While the ICO is no longer investigating the EasyJet data breach, this is still worth doing to ensure the full extent of the breach is recognised.
Make a report to Action Fraud
If you have been scammed, defrauded, or experienced cybercrime due to the EasyJet data breach, or any other matter, you should report this to Action Fraud.
Take legal action against EasyJet
You can take legal action to force a company to pay compensation for its failure to protect your data rights. Have you been notified that your data was involved in the EasyJet data breach? If yes, you could have a NO-WIN, NO- FEE compensation claim. Our simple eligibility checker provides instant clarity. Answer a few straightforward questions, and you’ll know if you could qualify for an EasyJet data breach group action claim.
