Data security analysts have concluded that the cyberattack on Air Europa's customer payment system lasted some nine days and that it affected around 110,000 customers.
Over the nine days, hackers managed to open a corridor and obtain sensitive banking data. When there was confirmation that a hack had compromised customer data, the airline decided to communicate this on Tuesday in order to prevent any greater harm.
Air Europa have brought in three leading firms in order to ensure security. The airline has assumed full responsibility for what has happened.
Customers were emailed and advised to cancel their cards as a matter of urgency. It isn't clear if any fraudulent activity has occurred, but a fear is that customer details have been put up for sale on the dark web.
The Balearic government's consumer affairs department has said that if there are any irregular charges to credit cards, claims can be made to banks.
As to who was behind the hack, there is speculation that it was of Russian origin. There is no confirmation of this. All that is being said is that those responsible were of a "world-class level".