easyJet

easyJet is a British low-cost airline that has been operating across Europe since 1995. It runs one of the continent's most extensive point-to-point networks, serving 164 airports in 38 countries with a fleet of 355 aircraft and more than 1,207 routes. The company employs more than 18,000 people and is headquartered at London Luton Airport.

The attack surface is massive: tens of millions of customers pass through its booking, payment, and loyalty systems each year. Aviation and tourism are sectors where data breaches and operational disruption carry outsized consequences - flight operations, passenger manifests, payment processing, and the easyJet holidays platform all represent critical targets. The airline reported a significant cyber-attack in 2020 that exposed the email addresses and travel details of approximately nine million customers, underscoring the real-world threat model this team operates within.

A cybersecurity function here would sit at the intersection of legacy airline infrastructure, modern cloud-based retail and booking platforms, and operational technology tied to ground and flight operations. The scope covers securing customer data at scale, protecting payment pipelines, maintaining compliance across multiple EU and UK regulatory frameworks, and defending against threats to business continuity in an industry where downtime means grounded aircraft and stranded passengers.