PAL Airlines is working with the Federal Privacy Commissioner to investigate what they are calling a “data security incident.”

In a statement released this morning, PAL says access has been gained to a single email account that holds the data of customers and employees, including names, dates of birth and credit card information.

They believe, however, it is largely limited to the information collected for the PAL Airlines employee pass travel program. PAL is in the process of contacting all affected customers.

PAL says they are taking steps to prevent such an incident from happening again.