EasyJet has announced that hackers have accessed the email and travel details of around nine million customers, as well as the credit card details of more than 2,000 customers.
They’ve said they will contact anyone who has been affected in the next couple of days, and that there is "no evidence" that the personal information has been misused.
If you’re one of the 2,208 customers who have had their credit card details stolen, EasyJet will already have contacted you.
For everyone else, EasyJet will let you know in the next few days (and no later than 26 May) if you’ve been affected. In the meantime, there are steps you can take to protect yourself against fraudsters.
1. If your credit card details have been stolen, cancel your card
If your credit card details have been stolen, you’ll need to contact your credit card provider to explain what’s happened. They’ll cancel your card and issue you a new one (they may have already done this). Normally you’ll be reimbursed for any charges you weren’t responsible for if you report fraud quickly.
You can also report it to ActionFraud.
2. Change your passwords
EasyJet haven’t said that any passwords were stolen in the breach. However, it’s worth changing the password for your EasyJet account.
If like many people, you’ve used your EasyJet password for lots of sites, it’s a good idea to change it for your other accounts too. Watch our guide for the best technique for doing this.
3. Check your bank statements
Check your bank statements and make sure you recognise everything on there. If you see anything suspicious, contact your bank or lender straight away.
This also applies if you start to receive bank statements in the post or new credit cards that you weren’t expecting - it could be a sign someone has opened an account in your name.
4. Check your credit report
Check your credit report for any searches or accounts you don’t recognise (read about how to do this).
If someone is trying to take out credit in your name, a hard credit search will appear on your credit report.
If you spot a credit search you don’t recognise, check with the named lender first then report it as quickly as possible to Action Fraud.
Look for signs of fraud: check your searches in your ClearScore account.
5. Be wary of unsolicited emails, texts and calls
After a large-scale data breach, you should be particularly wary of unsolicited emails and messages. It’s likely that fraudsters will pose as EasyJet or your bank and claim to be dealing with the breach, but they are simply trying to steal personal details themselves.
Stay alert: find out how to spot scams.
6. Use a dark web monitoring service
With large-scale company data breaches becoming more common, it’s more important than ever to protect your information.
ClearScore Protect is a free dark web monitoring service that tells you if your data has been involved in a breach. Every three months, we’ll scan the dark web to see if your passwords have been stolen, so you can change your passwords and protect yourself.
If you’re looking for even more peace of mind, you can subscribe to daily dark web scans with ClearScore Protect Realtime. You’ll get a more comprehensive dark web scan where we search for more of your information, and you’ll also get access to dedicated fraud support.