Back to Radar
TA

TAP Air Portugal

High

TAP Air Portugal faced a major data breach in August 2022, impacting over 6 million individuals' sensitive personal information.

Records exposed
6,083,479 records
Breach date
Breach Aug 25, 2022
Last update
Updated Feb 5, 2023

What data was exposed?

Fields reported as compromised in this breach record.

Dates of birthEmail addressesGendersNamesNationalitiesPhone numbersPhysical addressesSalutationsSpoken languages

Why does this breach matter?

In-depth analysis of the breach and its implications.

In late August 2022, TAP Air Portugal encountered a significant security breach due to a ransomware attack executed by the Ragnar Locker group. This incident resulted in the exposure of sensitive personal information of approximately 6 million individuals, including unique email addresses along with names, genders, dates of birth, phone numbers, addresses, and other data. The attackers later published this data on dark web forums.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Exposed users faced increased risks of phishing attempts, identity theft, and misuse of their personal information.
Business Impact
TAP Air Portugal experienced reputational damage, potential financial penalties, and increased operational strain.
Affected Sectors
  • Transportation
  • Aviation
Geographic Impact
  • Global
  • Portugal

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Update passwords associated with your email address.
  • Monitor financial and social accounts for any suspicious activity.
  • Exercise caution with unsolicited messages.
  • Report unauthorized transactions promptly.

Preventive Measures

  • Enable multi-factor authentication on all accounts.
  • Use strong, unique passwords stored in a secure password manager.
  • Be vigilant regarding any phishing attempts.
  • Keep your devices' software updated.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Personal data including email addresses, names, genders, DoBs, phone numbers, and physical addresses were exposed.