News
Thai Lion data breach
September 13th 2019
Hackers obtain 14 million passport details. Read More »
Personal data and privacy are back in the spotlight in the region. Hackers have obtained passenger data from Thai Lion Air, a subsidiary of the Lion Air Group.
There were two sets of leaked data, according to Twitter user, Under the Breach, which posted redacted photos of the data. Thai Lion could not be reached for comment.
The first tranche comprised 21 million records that included passenger ID, reservation ID, customer address, telephone number and email. A second tranche contained comparatively fewer records but with the more sensitive data of passenger name, date of birth, telephone number, passport number and passport expiration date. The hacker’s purpose is not known.
In comparison, Cathay Pacific’s 2018 data breach affected 9.4 million passengers, but with relatively limited personal data disclosed. Cathay said the breach included 430 credit card numbers, mostly expired and none complete. There are no known reports of the breached data being misused. Earlier in 2018, a British Airways data breach resulted in approximately 500,000 passenger credit card details - number, expiration date and verification number - being stolen along with passenger data. There is no report of the Thai Lion data breach including payment details.
