2023-10-13 09:26:48
The cyber attack a Air Europa was carried out by “hackers” of Russian origin who entered the airline’s servers at its head office in Mallorca, in Llucmajor, according to reports Mallorca Diaryinternal Air Europa fonts at illa.
The infiltration, the second the company has suffered since 2018, took place, according to the same sources consulted, between September 26 and 29 and compromised the information of 100,000 customer bank cards, although it wasn’t until Tuesday that Air Europa sounded the alarm. The compromised information of 100,000 Air Europa customers’ bank cards affected the data these customers use to make payments when purchasing airline tickets: the card numberthe Expiry date and the three check digits.
Air Europa is asking its customers to cancel their credit cards after suffering a cyber attack
Immediate cancellation
After raising the alarm, Air Europa sent a mail to the affected cardholders because cancel them immediatelyalthough there is still no evidence of irregular payments as a result of the Russian cyber attack on the airline’s servers at the Llucmajor headquarters.
“In order to protect your interests, we recommend that you follow the following steps,” the airline said in the aforementioned email. From there, he listed a series of preventive measures that his customers should follow in order to avoid a problem of fraudulent use in bank accounts. Thus, he has asked to identify the card used to make payment on the company’s website and to contact the bank to request “the annulment, cancellation or replacement of this card in order to avoid the possible fraudulent use of information”.
The banks of Mallorca received one after the Air Europa alarm flood of inquiries to know how they should proceed with the bank cards of Air Europa customers who received the communication about the infiltration. Some of those affected informed this newspaper that the cancellation and renewal of the card cost them one extra cost of six euros in the processing. Air Europa credit cards contracted by customers through Bankintercard and which give their holders benefits and discounts on flights were automatically blocked without the holder’s request, as reported by a customer affected by this security decision.
Infiltration via skimming
As reported by the digital newspaper The confidentialAir Europa has requested a report from the consulting firm Deloitte, a company which, despite being one of the most qualified in this field, also suffered a cyber attack on a global scale in 2017, which affected millions of internal emails.
Once it has this correct X-ray of what has happened, the airline, which was fined for the previous problem in 2018 with 600,000 euros, will take additional measures and activate the liability insurance. On that occasion, the fraudulent use of 4,000 cards was detected, a little less than 1% of the thefts.
As it progresses The confidentialbased on the three computer security experts he consulted, the infiltration would have occurred using the technique of web skimming. It consists of accessing the company’s servers and modifying the source code of the page where they ask you to enter your card details. When this data is submitted, this page makes a call to the payment gateway. Everything seems normal, explains the digital newspaper, but it also transmits the data to a server of the attackers. Let’s say they are being collected in real time as people buy tickets, Ramón Medrano, a specialist in cyber security and privacy, tells the newspaper.
“The cyber attack could have had as its object the blackmailbut we do not rule out that the stolen data was sold to the dark webso the possibilities of being the subject of fraud and embezzlement of funds multiply”, considered, for its part, the Association of Financial Users (Asufin) in a statement issued on Tuesday.
Check here all the news from Diari de Girona
#cyberattack #Air #Europa #affects #bank #cards #customers