Faaez Samadi
Oct 25, 2018

Cathay Pacific announces huge data breach

Personal information, including passport and credit card numbers, hacked from around 9.4 million passengers, airline confirms.

Cathay Pacific announces huge data breach

Hong Kong’s Cathay Pacific, one of the world's most renowned Asian airlines, has reported a serious data breach that saw the personal information of millions of customers accessed without authorisation.

The carrier confirmed the breach in a statement, saying “the passenger data of approximately 9.4 million people has been accessed” without authorisation and that it had contacted local police.

The types of personal data accessed by the intruders was extremely wide-ranging, according to Cathay’s statement, and included the following: “Names of passengers, their nationalities, dates of birth, telephone numbers, email, physical addresses, passport numbers, identity card numbers, frequent flyer programme membership numbers, customer service remarks and historical travel information.”

Approximately 860,000 passport numbers and 245,000 Hong Kong ID card numbers were stolen, the airline said, in addition to 403 expired credit cards and 27 credit cards with no CVV number. According to the airline, “The information accessed varies between passengers. No travel or loyalty profiles were accessed in full. No passwords were compromised.”

The statement was released in accordance with stock exchange rules, and reveals some troubling information regarding the timing of Cathay Pacific’s disclosure that will likely cause the brand significant issues. While transparency is welcomed by consumers, the airline said it “discovered suspicious activity” on its network as early as March this year.

Cathay Pacific social media mentions. (Source: Meltwater)

Cathay Pacific then confirmed the breach, the statement reads, in early May. “Since that time, analysis of the data has continued in order to identify affected individuals and to determine whether the data at issue could be reconstructed,” the carrier said, to explain the delay in disclosure.

Questions are already being asked about the delay, with Hong Kong legislator Elizabeth Quat telling AFP it was “unacceptable”.

Cathay Pacific said it is now contacting affected passengers. The company’s share price tumbled more than 6% earlier today, and Hong Kong’s privacy commissioner for personal data “expressed serious concern” in a statement, urging the airline to “take remedial steps with details explained immediately”.

Campaign Asia

Related Articles

Just Published

1 day ago

A spotlight night for Publicis Groupe, with Ogilvy ...

There was intense competition between Publicis' Leo Burnett and Ogilvy at the 2023 Southeast Asia AOY awards last night, with the former ultimately taking home the bulk of the metal haul.

1 day ago

'Special' night prevails over Motion Sickness at ...

Special Group steals the show with five Golds between both markets, while Kiwi challenger Motion Sickness racks up an impressive six awards, and Initiative leads the media pack.

1 day ago

Ogilvy and Mindshare split top APAC network awards ...

With four out of four Network metals in the bag last night, WPP took home all the coveted honours at this year's awards ceremony, hosted live from the glitzy Ritz-Carlton in Singapore.

1 day ago

Prime Video nabs first big agency partner as it ...

IPG Mediabrands will be the first media holding company to join forces with Amazon Advertising to access Prime Video ads.