Faaez Samadi
Oct 25, 2018

Cathay Pacific announces huge data breach

Personal information, including passport and credit card numbers, hacked from around 9.4 million passengers, airline confirms.

Cathay Pacific announces huge data breach

Hong Kong’s Cathay Pacific, one of the world's most renowned Asian airlines, has reported a serious data breach that saw the personal information of millions of customers accessed without authorisation.

The carrier confirmed the breach in a statement, saying “the passenger data of approximately 9.4 million people has been accessed” without authorisation and that it had contacted local police.

The types of personal data accessed by the intruders was extremely wide-ranging, according to Cathay’s statement, and included the following: “Names of passengers, their nationalities, dates of birth, telephone numbers, email, physical addresses, passport numbers, identity card numbers, frequent flyer programme membership numbers, customer service remarks and historical travel information.”

Approximately 860,000 passport numbers and 245,000 Hong Kong ID card numbers were stolen, the airline said, in addition to 403 expired credit cards and 27 credit cards with no CVV number. According to the airline, “The information accessed varies between passengers. No travel or loyalty profiles were accessed in full. No passwords were compromised.”

The statement was released in accordance with stock exchange rules, and reveals some troubling information regarding the timing of Cathay Pacific’s disclosure that will likely cause the brand significant issues. While transparency is welcomed by consumers, the airline said it “discovered suspicious activity” on its network as early as March this year.

Cathay Pacific social media mentions. (Source: Meltwater)

Cathay Pacific then confirmed the breach, the statement reads, in early May. “Since that time, analysis of the data has continued in order to identify affected individuals and to determine whether the data at issue could be reconstructed,” the carrier said, to explain the delay in disclosure.

Questions are already being asked about the delay, with Hong Kong legislator Elizabeth Quat telling AFP it was “unacceptable”.

Cathay Pacific said it is now contacting affected passengers. The company’s share price tumbled more than 6% earlier today, and Hong Kong’s privacy commissioner for personal data “expressed serious concern” in a statement, urging the airline to “take remedial steps with details explained immediately”.

Related Articles

Just Published

2 hours ago

Dentsu continues strong growth trajectory in Q2

The network's Customer Transformation & Technology division grew 22.25%, powering overall gains for a second straight quarter. Protracted sale of the Russian business dilutes net gains.

4 hours ago

Son Heung-Min chooses ‘boldness’ in Tiger Beer ...

Publicis unveils Tiger’s second brand film following Son’s signing as brand ambassador.

4 hours ago

Tech Bites: Week of August 8, 2022

News from Shopee, Summit Media, Accenture, BDigital, and more.