Llucmajor, Islas Baleares, Spain

Air Europa operates as an airline providing passenger air transport services, with its headquarters based in Llucmajor, Islas Baleares, Spain. The company manages an online payment system for customer transactions, handling sensitive financial data such as credit card information during booking processes. A confirmed cyberattack on October 10, 2023, compromised this payment infrastructure, leading to unauthorized access to customer payment details. The breach prompted direct notifications to impacted individuals and financial institutions, with the airline advising card cancellation and replacement to mitigate fraud risks. No evidence emerged suggesting misuse of the exposed data at the time of disclosure.

This incident followed a prior cybersecurity breach for which the airline had received regulatory fines related to inadequate data protection practices. The recurrence underscores systemic vulnerabilities in Air Europa’s payment security framework. The organization’s response emphasized containment and customer protection measures but did not disclose technical specifics of the attack vector or long-term mitigation strategies beyond immediate fraud advisories. No operational disruptions to flight services were reported in connection with either breach, indicating isolated compromises of digital systems rather than broader infrastructure attacks. The incidents reflect ongoing challenges in securing transactional platforms against evolving cyber threats.