Data breach reference · April 2022

The Sunwing Airlines data breach

What was disclosed, and how to check whether your address was in it.

At a glance
Disclosed
15 April 2022
Records
30,000 (Office of the Privacy Commissioner of Canada)
Type
Third-party vendor breach
Sector
General

Check whether your address was in it

No account needed. The address is used only to run the check. Privacy

This disclosure

What is on the record.

30,000
Records reported in the disclosure
1,646 days
Since the disclosure, 15 Apr 2022

Source: Office of the Privacy Commissioner of Canada, as recorded in the LeakTrace tracker.

What happened

In April 2022, a cyberattack against Airline Choice, a third-party technology provider used by Sunwing, disrupted check-in and reservation systems for approximately five days. Thousands of vacationing passengers were stranded at airports across Canada, the Caribbean, and Mexico.

Passenger information including names, contact details, and booking references was potentially exposed. The incident drew regulatory attention to the concentration risk of shared aviation-technology platforms.

Reported impact: Multiple lawsuits filed

Source: Office of the Privacy Commissioner of Canada, 15 Apr 2022.

What to do if you were affected

  1. If you flew Sunwing between April and May 2022, review your booking confirmation email for suspicious activity.
  2. Watch for phishing emails referencing flight changes or refunds.
  3. Change any passwords reused across your travel booking accounts.
  4. Contact Sunwing customer support if you receive suspicious communication.

Common questions

When was the Sunwing Airlines breach disclosed?
In April 2022. Public reporting was carried by Office of the Privacy Commissioner of Canada.
How many people were affected?
30,000 records, by the figure in the disclosure. Whether your own details were among them depends on your relationship with Sunwing Airlines at the time.
How do I check whether my address was in it?
Enter the address in the check above. We check that one address against monitored breach databases and show what was exposed and what to do first. No account needed.
Is the data still a risk years later?
Often, yes. Lists from old breaches keep being copied and reused, so a password from one can still be tried today. Changing it, and not reusing it, closes that door.

Other breaches in this sector

Dodo PizzaSep 2026 · 68,000,000 recordsTicketmasterMay 2024 · 560,000,000 recordsLondon DrugsApr 2024 · 3,000,000 recordsSnowflake customer credential-stuffing: AT&T 73M recordsApr 2024 · 73,000,000 records

Is your address in a public breach? Check my address →