easyJet Data Breach: 9 Million Customers Affected

easyJet has announced a data breach affecting 9 million customers. Customers that are affected will be notified no later than May 26th, 2020. The details surrounding this data breach are sparse at the moment, although easyJet does state that a small subset of customers (2,208) had their payment details accessed (these customers have already been notified). It’s unclear when the attackers breached easyJet’s system and what other details were taken. GDPR applies in the UK, this means that a fine of up to 4% of annual turnover can be issued.