Personal data of 9 million of EasyJet customers could have been affected due to a cyberattack. As the breach happened in January, the company actually managed to notify the officials within 72 hours but failed to announce the leakage for the impacted clients making it public only 4 months later.

Those who got their credit card details compromised were contacted in April. There have been about 2,200 bank card records uncovered. The breached information contained names and emails.

Individuals can have the exposure compensated up to £2,000 each making the company possibly pay a total amount of £18 billion.

EasyJet is now working with the Information Commissioner’s Office with regard to DPA 2018 and GDPR compliance.