Air France and KLM have informed Flying Blue customers that some of their personal information was exposed after their accounts were compromised. Flying Blue is a loyalty program that allows customers of several airlines, including Air France, KLM, Transavia, Aircalin, Kenya Airways and TAROM, to exchange their loyalty points for various rewards. See also: Play ransomware responsible for Rackspace attack
“Our security teams have detected suspicious activity from an unauthorized ‘entity’ associated with your account. We have immediately taken appropriate action to prevent further exposure of your data.” This was stated in the notifications sent to customers affected by this attack, adding that the information security department has taken measures to prevent any further suspicious activity. The attack was confirmed by KLM itself through a tweet from their official account, reassuring one of its customers, saying that the were not lost miles , as they managed to stop the attack in time. they had collected The data that may have been leaked is the following: – Name – Email addresses – Phone numbers – Recent transactions – Other information from Flying Blue, such as the balance of their earned miles.
KLM, which is a member of the airline KLM, said it has locked the accounts of affected users and they should change their Flying Blue passwords via the website.
Criminals are attracted to the wealth of sensitive and personal data that the travel industry holds on each traveler.
Travel companies often have a lot of personal information about their customers, such as their name, email and phone number. If this information is not properly protected, it can be stolen by cybercriminals.
This can be harmful to customers and can also damage a company's reputation. It is important for companies to have a strong cybersecurity in place to prevent such breaches.
This should include plans for how to handle an account breach and how to reduce the company's risk of being attacked in the first place.
Information source: bleepingcomputer.com
