TA

TAP Air Portugal

High

TAP Air Portugal faced a major data breach in August 2022, impacting over 6 million individuals' sensitive personal information.

6,083,479 recordsBreach Aug 25, 2022Updated Feb 5, 2023

Exposed data classes

Fields reported as compromised in this breach record.

Dates of birthEmail addressesGendersNamesNationalitiesPhone numbersPhysical addressesSalutationsSpoken languages

Detailed Analysis

In-depth analysis of the breach and its implications.

In late August 2022, TAP Air Portugal encountered a significant security breach due to a ransomware attack executed by the Ragnar Locker group. This incident resulted in the exposure of sensitive personal information of approximately 6 million individuals, including unique email addresses along with names, genders, dates of birth, phone numbers, addresses, and other data. The attackers later published this data on dark web forums.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Exposed users faced increased risks of phishing attempts, identity theft, and misuse of their personal information.
Business Impact
TAP Air Portugal experienced reputational damage, potential financial penalties, and increased operational strain.
Affected Sectors
  • Transportation
  • Aviation
Geographic Impact
  • Global
  • Portugal

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Update passwords associated with your email address.
  • Monitor financial and social accounts for any suspicious activity.
  • Exercise caution with unsolicited messages.
  • Report unauthorized transactions promptly.

Preventive Measures

  • Enable multi-factor authentication on all accounts.
  • Use strong, unique passwords stored in a secure password manager.
  • Be vigilant regarding any phishing attempts.
  • Keep your devices' software updated.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Personal data including email addresses, names, genders, DoBs, phone numbers, and physical addresses were exposed.