WizzAir today announced its customers that their account password has been automatically reset due to a technical issue in the system.
With over 3,000 employees, the Budapest-based airline company Wizz Air offers over 600 routes from 25 bases in Central and Eastern Europe, being a large player in low-cost air travel services.
Airline blames “technical irregularity”
The company today sent out emails informing customers that it discovered and dealt with “some temporary technical irregularity.” To err on the side of caution, the airline decided to lock user accounts and force them to change the account login password.
As you can see from the email, there are no specific details about the incident, so some users feared that this was a way to inform customers that the company has been hacked. Thinking of a possible data breach, another customer reminded the company that under GDPR they have to provide a full and detailed account of the incident.
It appears that these assumptions are nothing to fret about. BleepingComputer ahs learned from a company representative that personal data belonging to customers was not affected in any way.
The company would not comment beyond the statement below, even when asked for details about how WizzAir stores user passwords:
“We can confirm that we have sent an email today to our customers about the detection of a temporary technical irregularity in our system. At no point was any personal data compromised and resetting the passwords on the WIZZ accounts was a precautionary action. Safety remains a priority for Wizz Air, and that includes the security of our passengers’ data.” – WizzAir
Following the notification message, people with a WizzAir account will receive a new email with instructions about how they can regain access to all features of the Wizz account.
The new password can be a string of up to 16 alphanumeric characters long, but no shorter than seven. Upper and lower-case letters, numbers and special characters are accepted to make it stronger.
A healthy recommendation from the company is “to avoid providing the previous password as new one, and to avoid using the same password in all websites where you register.”
h/t Gabriel Cîrlig