Bangkok Airways has apologized for a data breach involving passport details and other personal data in a statement to customers.
The company announced that it discovered a “cyberattack that led to unauthorized and unlawful access to its information system” on August 23.
See also: Ford: Bug allowed breach of customer and employee data
See also: Telecom company StarHub suffers data breach
The statement says the company "is deeply saddened by the concern and inconvenience this malicious incident has caused.".
Bangkok Airways did not respond to ZDNet's requests for comment on how many customers were involved in the breach or what time period the data came from, but in its statement the company said the investigation revealed that the names, nationalities, genders, phone numbers, emails, addresses, contact information, passport details, travel history, some credit card details and special meal information for the airline's passengers were compromised.
The company said it is still investigating the attack and is working to strengthen its IT system as it identifies potential victims.
The attackers were unable to affect Bangkok Airways' operational or aeronautical security systems, according to the statement, and the Royal Thai Police has been notified of the incident.
They urged customers to contact police or take legal action if they receive notifications purporting to be from Bangkok Airways and asking for credit card details or other information.
See also: Clubhouse: We deny data breach allegations
The announcement, which was released on Friday, coincided with an announcement from ransomware LockBit that said it planned to release 103GB of compressed files that it claimed had been stolen from Bangkok Airways.
The group said it would release the data on August 30, but in the past they have extended deadlines or reneged on their threats to release data.
Information source: zdnet.com
