British budget airline easyJet told the BBC that it is in the process of alerting 9 million customers about a data breach that occurred in January, exposing their email addresses and travel details. EasyJet reported that about 2,200 customers also had their credit card numbers stolen, including security codes, and that the company alerted those customers in early April. Regarding the 3-month delay before alerting victims, a spokesman for the airline commented, “This was a highly sophisticated attacker. It took time to understand the scope of the attack and to identify who had been impacted.”