Back to Data Breach

Data Breach

Data breach at UK-based budget airlines affects 9 million customers

In May 2020, easyJet, a low-cost British airline, revealed that it was the victim of a cyberattack that affected nine million customers. The attack occurred in January and compromised the email addresses, travel details, and credit card information of the 2,208 customers who booked flights between October 17, 2019 and March 4, 2020.

The incident

As soon as the attack was discovered, easyJet hired a third-party forensics expert to assess the breach and implement tighter security measures. The airline is currently in the process of notifying all the affected customers regarding the breach. Users who had financial details stolen have been already notified and were advised to keep an eye out for phishing emails and suspicious credit card activity. The company also notified the National Cyber Security Centre and the ICO.

"We take the cyber security of our systems very seriously and have robust security measures in place to protect our customers' personal information," said EasyJet CEO Johan Lundgren. "However, this is an evolving threat as cyber attackers get ever more sophisticated. We would like to apologize to those customers who have been affected by this incident."

Arm yourself against cybersecurity disasters like this by investing in a tool that will protect your network from brute-force attacks, ransomware threats, and denial-of-service (DoS) attacks. Download ManageEngine Log360, a comprehensive solution to help you combat both internal and external security attacks.

How ManageEngine can help.

Log360, our comprehensive SIEM solution, can help your organization by:

  • Alerting security teams in real time about events that require their immediate attention, such as network attacks, unauthorized access attempts to files or folders, security group membership changes, and account lockouts.
  • Detecting unauthorized network access attempts with its built-in Structured Threat Information eXpression (STIX/TAXII) feeds processor. Log360 also has a global IP threat database that can instantly detect known malicious traffic passing through the network as well as outbound connections to malicious domains and callback servers. 
  • Finding potential insider threats with its user and entity behavior analytics engine, which creates a baseline of normal activities that are specific to each user and notifies security personnel instantly when there's a deviation from this norm.
  • Obtaining important forensic information about incidents. The collected logs can be securely archived to help prove adherence to compliance standards and reduce potential legal penalties during investigations.
  • Automatically raising incidents as tickets to specific technicians in ServiceDesk Plus, JIRA, Zendesk, Kayako, or ServiceNow to create an incident resolution process that's swift and accountable.

Download a free trial of Log360 to see the tool in action for yourself.

© 2022 Zoho Corporation Pvt. Ltd. All rights reserved.

+

Stay In The Know

Thank you

You will receive weekly cybersecurity news soon!

  • Please enter a business email id
  •  
  •  
    By clicking 'I'm Interested', you agree to processing of personal data according to the Privacy Policy.