Of course the attacks have to be “highly sophisticated” in order to beat the “world-class” system that “highly paid” EasyJet security experts have put in place to secure customer data, which EasyJet “cares deeply” about.
"highly sophisticated cyberattack" is just PR speak for "cyberattack" - and successful cyberattacks are far more likely to be the result of negligence from company holding the data than the sophistication of the attackers.