Nine million easyJet passengers have had their travel details accessed by hackers, the airline has announced.

The Luton-based carrier said the figure includes 2,208 customers who had their credit card details exposed.

It insisted there is “no evidence that any personal information of any nature has been misused” due to the cyber attack.

The PA news agency understands that – apart from the people whose credit card details were accessed – the information obtained by the hackers was a customer’s name, email address, flight destination and date of travel.

EasyJet has begun contacting affected customers and pledged that they will all be informed by May 26.

The airline did not disclose when the cyber attack took place.

EasyJet chief executive Johan Lundgren said: “We take the cyber security of our systems very seriously and have robust security measures in place to protect our customers’ personal information.

“However, this is an evolving threat as cyber attackers get ever more sophisticated.

“Since we became aware of the incident, it has become clear that owing to Covid-19 there is heightened concern about personal data being used for online scams.

“As a result, and on the recommendation of the ICO (the Information Commissioner’s Office), we are contacting those customers whose travel information was accessed and we are advising them to be extra vigilant, particularly if they receive unsolicited communications.

“Every business must continue to stay agile to stay ahead of the threat. We will continue to invest in protecting our customers, our systems and our data.

“We would like to apologise to those customers who have been affected by this incident.”

Adam French, of consumer group Which?, said: “For anyone concerned they could be affected, it’s important to change your password with easyJet and other websites where you might use the same one – and keep a careful eye on bank accounts and credit reports.

“Also, be wary of emails or fake ‘customer support’ popping up on social media regarding the breach, as scammers may try to take advantage of it.”

The ICO announced last year that it intends to fine British Airways a record £183 million after the personal data of more than half a million passengers was compromised in a hacking incident believed to have started in June 2018.