Air India cyber-attack: Data of millions of customers compromised

  • Published
People walk past an Air India logo outside its building in Mumbai, India on 28 January 2020Image source, NurPhoto via Getty
Image caption,
Air India said the cyber-attack affected the information of about 4.5 million customers

India's national airline Air India has said a cyber-attack on its data servers affected about 4.5 million customers around the world.

The breach was first reported to the company in February. Details including passport and ticket information as well as credit-card data were compromised.

But Air India said security details for credit cards - CVV or CVC numbers - were not stored on the server targeted.

It is not immediately clear who was behind the attack.

The airline, a member of the Star Alliance network, said the breach involved all information registered between 26 August 2011 and 20 February 2021.

It asked all its customers to change the passwords to their accounts on its website.

Air India said no subsequent unauthorised activity had been detected.

Last year, British Airways was fined £20m ($26m) for a data breach which affected personal and credit card data of more than 400,000 customers in 2018.

You may also find interesting:

Media caption,

Businesses are being held to ransom by callous cyber-criminals