Over 10,000 customers join EasyJet data breach action

The law firm which launched an £18bn class action claim against EasyJet, just days after the airline reported a massive data breach, has already signed up more than 10,000 customers seeking compensation for the loss of their personal information.

PGMBM – which recently changed its name from SPG Law following major expansion – launched the action under Article 82 of GDPR, which gives customers the right to compensation for inconvenience, distress, annoyance and loss of control of their personal data.

EasyJet admitted in May that the personal data of 9 million customers had been compromised, and the credit card details of just over 2,200 had been stolen, in an attack that makes the 2018 British Airways incident look miniscule.

However, PGMBM alleges EasyJet first discovered the breach in January, when it reported the incident to the Information Commissioner’s Office. EasyJet has yet to comment on why it waited four months to notify its customers.

In fact, those who have been affected by the breach have only received one email from the airline, dated May 21 2020 and signed by CEO Johan Lundgren, in which it confirmed their account had been hacked.

The email stated: “Our investigation found that your name, email address, and travel details were accessed for the EasyJet flights or EasyJet holidays you booked between October 17 2019 and March 4 2020. Your passport and credit card details were not accessed, however information including where you were travelling from and to, your departure date, booking reference number, the booking date and the value of the booking were accessed. We are very sorry this has happened.”

However, the email added: “You do not need to take any action apart from continuing to be alert as you would normally be, especially with any unsolicited communications.”

The company has not even offered credit monitoring to those affected.

PGMBM has stated that it will first try to settle the claim with EasyJet by way of a pre-action letter. If that fails, the firm will take the case to a Group Litigation Order.

The firm added that if a quick settlement with EasyJet is reached, affected customers could receive their compensation within the next six months. However, if EasyJet decides to fight it out in court, it could take up to two years for them to receive compensation, provided they win.

In response, the airline said: “We are aware that a class action law firm has filed a claim against EasyJet in the High Court and that other firms are advertising their services to do the same. This is not uncommon and just because these firms are advertising does not mean they have a strong claim.”