Jane Anderson
Legal Director
Nine million EasyJet customer details lost in data breach
In May 2020 hackers obtained the personal details of 9 million Easyjet customers and the credit card details of a further 2,000+.
15.06.2020
Sabrina Goran (sabrina.goran@irwinmitchell.com) comments on a potential group claim against the airline.
A cyber-attack on EasyJet earlier this year has resulted in the exposure of the email addresses and flight details of nine million of its customers, and the credit card details of 2,208 of those customers. EasyJet reportedly notified affected customers by email in May.
The ICO has confirmed it is investigating the breach. The maximum fine the ICO could issue in respect of a serious data breach is €20,000,000 or 4% of the global annual turnover.
The General Data Protection Regulation (GDPR), allows individuals to bring claims for damages for distress in respect of data breaches such as this. Individuals are not required to have suffered any direct financial loss in order to receive compensation in respect of a data breach. Law firm PGMBM has confirmed it has issued a claim form on behalf of the impacted customers and is seeking to recover up to £2,000 per impacted customer.
https://www.cityam.com/easyjet-woes-grow-after-it-is-hit-with-massive-group-action-claim-over-data-breach/
Key Contacts
Related Articles
Expert CommentLicensing authorities face a more transparent and more equality-focused operating environmentLicensing authorities are entering a period of notable procedural change. While the reforms come from different sources, their combined effect is clear: licensing decisions will need to be more transparent, better evidenced and more accessible to applicants, licence holders and affected communities.What this means in practiceKey takeaways
Expert CommentMI5, Agent X and False Evidence to the Courts: MI5’s non-compliance with their Duty of Candour leads to Contempt of Court“Neither Confirm No Deny” (“NCND”) is a longstanding policy relied upon by intelligence and law enforcement agencies. The rationale is that confirming or denying the identity of informants, intelligence assets or operational methods may, in itself, damage national security.
Expert CommentTobacco and Vapes Act 2026: licensing consultation delayed, but businesses should not waitOne of the most significant public health reforms has been designed to create what the Government describes as a “smoke-free generation” whilst also tightening controls around vaping and nicotine products.
