Cyber Attackers Accessed Around 618,000 airBaltic Passenger Booking Records
Unauthorised access has been detected in the systems of an external IT provider to Latvia's national airline airBaltic, affecting about 618,000 bookings. Payment and travel document data were not affected.
Unauthorised access to passengers' online check-in data has been detected in the systems of an external information technology provider used by airBaltic, Latvia's national airline. The incident affects about 618,000 passenger bookings, the airline told the news agency LETA. The company stresses that airBaltic's own IT systems were not affected.
What data is affected
The bookings belong to passengers who checked in online for airBaltic flights between 18 July and 12 November 2026. The data accessed in the provider's systems include passengers' names and surnames, booking numbers and flight information. Payment data, travel document data and other sensitive information were not affected. So far there are no signs that the data has been misused.
Measures taken
About 11,800 of the affected bookings include flights that have not yet taken place, and this figure may change as the investigation continues. To protect active bookings from unauthorised access and changes, the airline has disabled booking management and online check-in for the affected reservations. Affected passengers can check in at the airport free of charge. For other passengers, online services work as usual and flights operate according to schedule.
airBaltic urges passengers to be cautious about unexpected emails, text messages or calls about their booking, particularly those offering compensation or a refund. The accessed data could potentially be used for fraudulent messages or attempts to access and change bookings.
The airline and the service provider have informed the relevant supervisory authorities, including Cert.lv. The investigation into the circumstances continues. Passengers with questions can contact the airline's data protection specialist at gdpr@airbaltic.com.
Background
airBaltic is currently in Chapter 11 proceedings, which shield the company from creditor claims until its debt restructuring is completed. On 19 October a US bankruptcy court approved a DIP financing structure of up to €350 million. The Latvian state owns 88.37% of the company's shares and Lufthansa owns 10%.
