Turkish low-cost carrier Pegasus Airlines said on Thursday it had fixed a security vulnerability in its internal support systems after allegations that about 173 gigabytes of corporate and customer data had been stolen, but denied that a breach occurred.
The company officials clarified that the affected infrastructure supported internal application development and was separate from the airline's critical operational systems in a statement to Anadolu Agency.
Allegations circulating in Turkish media and on social media claimed that about 173 GB of Pegasus Airlines data, including corporate documents and sensitive customer information, had been obtained.
The allegedly compromised data reportedly included passengers' identity details, passport information and flight reservation records, raising concerns over the potential exposure of personal and travel-related information.
Pegasus stressed that its passenger databases were not stored on the affected systems, which were also not used to manage flight operations.
However, the airline did not disclose technical details about the vulnerability or clarify whether unauthorized access to the systems had occurred.
It added that its information security and personal data protection practices comply with national and international legal regulations and standards.
Pegasus carried 43.3 million passengers in 2025, up 15.4% from 37.5 million a year earlier, according to the airline's annual activity report.
Domestic passengers accounted for a significant share of the airline's traffic, while international travel continued to drive its expansion. The airline operated 234,270 flights during the year, with an average passenger load factor of 87.7%.
Pegasus' passenger numbers rose from 37.48 million in 2024 to 43.26 million in 2025, marking an increase of nearly 5.8 million travelers in one year.