Faaez Samadi
Oct 25, 2018

Cathay Pacific announces huge data breach

Personal information, including passport and credit card numbers, hacked from around 9.4 million passengers, airline confirms.

Cathay Pacific announces huge data breach

Hong Kong’s Cathay Pacific, one of the world's most renowned Asian airlines, has reported a serious data breach that saw the personal information of millions of customers accessed without authorisation.

The carrier confirmed the breach in a statement, saying “the passenger data of approximately 9.4 million people has been accessed” without authorisation and that it had contacted local police.

The types of personal data accessed by the intruders was extremely wide-ranging, according to Cathay’s statement, and included the following: “Names of passengers, their nationalities, dates of birth, telephone numbers, email, physical addresses, passport numbers, identity card numbers, frequent flyer programme membership numbers, customer service remarks and historical travel information.”

Approximately 860,000 passport numbers and 245,000 Hong Kong ID card numbers were stolen, the airline said, in addition to 403 expired credit cards and 27 credit cards with no CVV number. According to the airline, “The information accessed varies between passengers. No travel or loyalty profiles were accessed in full. No passwords were compromised.”

The statement was released in accordance with stock exchange rules, and reveals some troubling information regarding the timing of Cathay Pacific’s disclosure that will likely cause the brand significant issues. While transparency is welcomed by consumers, the airline said it “discovered suspicious activity” on its network as early as March this year.

Cathay Pacific social media mentions. (Source: Meltwater)

Cathay Pacific then confirmed the breach, the statement reads, in early May. “Since that time, analysis of the data has continued in order to identify affected individuals and to determine whether the data at issue could be reconstructed,” the carrier said, to explain the delay in disclosure.

Questions are already being asked about the delay, with Hong Kong legislator Elizabeth Quat telling AFP it was “unacceptable”.

Cathay Pacific said it is now contacting affected passengers. The company’s share price tumbled more than 6% earlier today, and Hong Kong’s privacy commissioner for personal data “expressed serious concern” in a statement, urging the airline to “take remedial steps with details explained immediately”.

Related Articles

Just Published

54 minutes ago

Move and win roundup: Week of May 17, 2021

DDB Hong Kong, IAS Japan, CatchOn, Hong Kong Design Centre (HKDC), Akcelo and more, in our weekly collection of people moves and account news.

11 hours ago

Yext throws it back to the ‘90s

The integrated marketing campaign spotlights outdated search technology with a side of nostalgia.

11 hours ago

Heineken reignites sporting rivalries ahead of Uefa ...

Campaign created by Le Pub, includes activations during the tournament across Europe, with support from brand ambassador and France legend Thierry Henry.

11 hours ago

Is spam-busting AI tech reducing amount of hate ...

Hate removal has spiked, but overall content deletion is down. Is spam-busting AI tech the answer?