EasyJet hackers stole data on 9 million customers and thousands of credit card numbers

A "sophisticated source" had accessed the email address and travel details of approximately 9 million customers, and the credit card details of 2,208, the company added.

EasyJet did not say when the attack took place. It said it was contacting all customers affected to offer support, and was working with the UK Information Commissioner (ICO) and National Cyber Security Centre.

EasyJet CEO Johan Lundgren apologized to customers, and he cited the coronavirus pandemic as a possible incentive for hackers.

"Since we became aware of the incident, it has become clear that owing to Covid-19 there is heightened concern about personal data being used for online scams," Lundgren said. "As a result, and on the recommendation of the ICO, we are contacting those customers whose travel information was accessed and we are advising them to be extra vigilant, particularly if they receive unsolicited communications."

EasyJet grounded all 334 of its planes in Europe in March as a result of travel restrictions across the region due to the pandemic, only operating rescue flights to repatriate citizens.

The airline has not confirmed when it will start flying again, telling customers it is currently canceling flights on a seven-day rolling basis, though flights are available for booking on the company's website from May 29.