Gol has confirmed a data breach involving a third-party system used by Smiles, its frequent-flyer program. According to the airline, the incident occurred on November 12 and affected fewer than 0.04% of its customer base. The company emphasized that no passwords, payment information, reservation details or user accounts were compromised. The exposed data was limited to identification details, contact information and copies of personal documents.
Gol stated that it promptly implemented security measures and began notifying affected users and the relevant authorities in accordance with Brazil’s data-protection requirements. The company also said that all impacted customers have already received an email with specifics about the incident and the types of data involved, as part of its efforts to reduce risks and provide proper guidance.