RE: What now?16 Aug 2023 12:42
I recently got an email message from Easyjet advising me that they would not be paying me any compensation for the cyberattack that resulted in customers accounts details including passport,credit card and personal contact details been stolen.
They've outright refused to compensate me saying the following in their email response as of yesterday for which I will obviously pursue further with the help of a data breaches
legal firm as I don't believe they should be able to avoid paying out. Read it to believe it.
Dear (Name withheld)
Thank you for contacting easyJet.
I'm sorry to hear that you were impacted by this cyber security incident.
We became aware of potential unusual activity in late January 2020 and launched an immediate investigation with the support of forensic experts. We also notified the National Cyber Security Centre and the Information Commissionerβs Office (ICO).
This was a highly sophisticated attacker. It took time to understand the scope of the attack and to identify whether, and if so to what extent, personal data had been affected. We could only reasonably assess what action to take in terms of informing people once the investigation had progressed enough that we were able to identify whether any individuals had potentially been affected, who had been affected or potentially affected, and what information had been accessed or potentially accessed.
We worked closely with the ICO and, following those discussions, we notified the customers who made relevant bookings via the contact email address in the bookings. This was particularly in light of the increased risk of phishing emails since the outbreak of Covid-19.
I understand you are seeking compensation in connection with the Cyber Attack. Whilst it is, of course, regrettable that this cyber-attack took place, it does not mean that easyJet was at fault or that you are entitled to compensation. Please know that we take the safety and security of our customersβ information very seriously. We consider that we have complied with the relevant obligations, and so we are not offering any compensation.
We are advising customers to continue to be alert as they would normally be, especially should they receive any unsolicited communications.
Kind regards,
(Name withheld)