Email addresses of former Meteolux subscribers potentially exposed

The Air Navigation Authority (ANA) announced on Tuesday afternoon that it is investigating a potential data leak involving subscribers to the Meteolux weather service.

The investigation was launched after the ANA was made aware of the possible breach. The authority's IT department is now working to determine whether private data was indeed leaked. The probe is focused on information provided primarily by professional users who were subscribed to the service before it became free. The circumstances of the potential breach are also under review. As a precaution, the relevant authorities have been informed.

In a statement, the ANA stressed that the potentially affected data is limited exclusively to the email addresses of former professional subscribers.

The authority is advising the public to remain vigilant, particularly against any third party falsely claiming to represent Meteolux to solicit data. The ANA emphasised that Meteolux will never initiate contact to request personal information via phone, email, or any other method.

"We would like to remind you that all our products are free of charge. Consequently, MeteoLux will never ask you to provide financial or banking details," the statement reiterated.

For further questions regarding data protection, individuals are advised to contact dpo@airport.etat.lu.

Full statement in English

Dear  Madam,
Dear Sir,
 
You previously subscribed to a Meteolux mailing list to receive certain specific climate products by email for free. As part of your subscription, you provided us with an email address. The climate products you subscribed to are now available free of charge on the Meteolux website. 
 
We have been informed, however, that the confidentiality of this outdated mailing list may have been compromised.
 
First and foremost, we would like to assure you that the protection of personal data is of great importance to the Administration de la navigation aérienne (ANA).
 
Upon receiving information about the potential breach of confidentiality related to the list of former subscribers to free Meteolux services, our IT department immediately launched an internal investigation – which is still ongoing – to assess the existence and, where applicable, the circumstances of the potential data leak.
 
At the same time, and in accordance with our legal obligations, the ANA has filed with the competent authorities the various notifications required by the applicable regulations, within the prescribed time limits, as a preliminary and precautionary measure.
 
It is important to note that the personal data potentially exposed would only concern the email addresses – often professional – of former subscribers.
 
Nevertheless, we invite you to remain vigilant, particularly if a third party claiming to be a representative of Meteolux asks you to provide your personal data.
 
Meteolux will never contact you to ask you to provide your personal data by telephone, email or any other means of communication. We would like to remind you that all our products are free of charge. Consequently, MeteoLux will never ask you to provide financial or banking details.
 
We apologise for any inconvenience this incident may have caused you and will keep you informed of our investigations.
 
If necessary, or for any further information, please contact the data protection officer at dpo@airport.etat.lu.
 
Administration de la navigation aérienne