Air Campania

Air Campania operates a transportation service application for its users. The organisation is headquartered in Italy. The app provides mobility‑related functionalities to its customers. Air Campania engages external partners to support the technical infrastructure of its service. One of its data‑processing partners is MyCicero, which acts as a contracted processor. The hosting environment for the app is supplied by Pluservice, which utilizes sub‑processor WIIT for data‑center operations.

In March 2025, Air Campania identified unauthorized external activity within the hosting environment that resulted in the exfiltration of users’ anagraphic, contact and location data. Upon confirming the breach, the affected system was temporarily taken offline to enable forensic analysis and the implementation of additional security measures. Air Campania notified the Italian data‑protection authority of the incident in accordance with GDPR breach‑notification requirements. The organisation also requested detailed information from MyCicero, Pluservice and WIIT to satisfy its obligations under the regulation regarding breach handling and security safeguards. This incident highlights Air Campania’s reliance on third‑party service providers and its need to manage data‑processor relationships under European privacy law. No further details about the organisation’s size, ownership structure or additional product lines are publicly available in the supplied sources.