Passengers’ names, home addresses, email addresses, dates of birth, phone numbers and passport numbers were made public in the massive data leakThe Lion Air subsidiary says the breach, which also affected Thai Lion Air, has been contained
Malindo Air made the breach public last week after Moscow-based cybersecurity firm Kaspersky Lab said in a report that the details of around 30 million passengers of Malindo and another Lion Group subsidiary Thai Lion Air were posted in online forums.
Kaspersky said parts of the leaked databases were up for sale on the dark web.
Malindo Air said in a statement that two former employees of e-commerce services provider GoQuo (M) Sdn Bhd in their development centre in India “improperly accessed and stole the personal data of our customers”.
The airline said the data breach has since been contained and the matter has been reported to the police in Malaysia and India.
An auto-reset of all customer passwords has been carried out and security experts have been brought in to review the airline’s data systems.
Published: 8:12pm, 23 Sep, 2019