Pegasus Airlines (Pegasus Hava Taşımacılığı) data breach

Pegasus Airlines (Pegasus Hava Taşımacılığı) announced a data breach on Nov 11, 2026 affecting about 11,762 people, exposing names, phone numbers and email addresses. It was caused by a cyberattack. No settlement or compensation has been announced.

What happened

Turkish low-cost carrier Pegasus Airlines reported a data breach to Turkey's data protection authority KVKK, which published the notice on November 11, 2026. According to the report, someone used the administrator password of Pegasus's internal IT request and development system to get unauthorized access; how the password was obtained has not been determined. The breach began on October 12, 2026 and was detected on October 26. It affected 11,762 people, described as employees and users of the system, and involved identity and contact data. The notice does not mention booking, passport or payment data.

What should I do?

1. If you work for or with Pegasus, be wary of emails, calls and messages that use your name and contact details to ask for passwords, codes or payments.
2. Change any password you used for Pegasus internal systems if you reused it elsewhere, and turn on multi-factor authentication.
3. Contact Pegasus through the channels on its website to ask whether your data was involved.
4. Treat unexpected messages offering Pegasus jobs, tickets or refunds with caution and verify them on flypgs.com.

More data breaches in Türkiye →

Check the other services you use →