Mobile app hit in cyberattack that compromised 20K user accounts.

Dark Reading Staff, Dark Reading

August 30, 2018

1 Min Read

Air Canada has alerted users of its mobile app of a data breach that exposed personal information – including stored passport numbers – of some 20,000 users.

The airline said after noticing "unusual login behavior" on the Mobile+ app from Aug. 22 to 24, it blocked that traffic and locked all Air Canada mobile app accounts. Customers now must reactivate their accounts on the app, which is back up and running.

"We contacted potentially affected customers directly by email starting Aug. 29 to tell them if we determined their account may potentially have been accessed improperly," Air Canada said on its website. "We are also requiring all Air Canada mobile app users to re-set their passwords using improved password guidelines to further enhance security measures. A more robust password provides an extra layer of protection."

Account-holder names, email addresses, and telephone numbers were exposed in the breach, in addition to passport numbers of those users who stored that information in their profiles. The airline has some 1.7 million mobile app users but said only 1% of the user accounts were accessed by the attackers.

Read more here.

 

 

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights