Air India Confirms Data of 4.5M Travelers Compromised
Affected data includes names, birthdates, contact information, passport details, and credit card data, the airline reports.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltc94608acf452fd67/655cf371ab171e040a838b2a/329050_DR23_Graphics_Website_V5_Default_Image_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Air India has confirmed attackers accessed data belonging to 4.5 million global passengers following a breach of aviation IT provider SITA's Passenger Service System in early March.
SITA PSS stores and processes personal data of Air India's passengers. In a statement, the airline reports this breach involved personal data registered between Aug. 26, 2011, and Feb. 3, 2021.
The affected details include name, birthdate, contact information, passport details, ticket information, Star Alliance and Air India frequent flyer data, and credit card data. However, the airline says CVV/CVC numbers were not affected because the data processor does not handle them.
It also reports password data was not affected but is encouraging passengers to change their passwords as a precaution.
Air India learned of the attack on Feb. 25, 2021, and reports it has since launched an investigation, secured compromised servers, notified credit card issuers, reset the passwords of its Air India frequent flyer program, and consulted external security specialists. It learned the details of affected passengers on March 25 and April 5, 2021.
Read Air India's full statement here.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024