Air India reports massive data breach

India's official flag carrier airline Air India has reported a massive data breach involving personal data registered between the 26th August 2011 and 3rd February 2021.

New Delhi: India's official flag carrier airline Air India has reported a massive data breach involving personal data registered between the 26th August 2011 and 3rd February 2021. The data breach includes details including customer name, DOB, contact info, passport info, ticket info, Star Alliance & Air India frequent flyer data (no passwords data affected) & credit cards data.

SITA PSS, Air India's data processor of the passenger information system had recently suffered a cybersecurity attack. This incident of the data breach has affected around 4,500,000 data subjects in the world. As per Air India, credit card data of CVV/CVC numbers are not stored by the data processor of the government-owned airline.

Air India is following measures to ensure the safety of data. The airline is also investigating data security incident and is securing the compromised servers. The airline is also engaging external specialists in data security and is liaising with the credit card issuers. The airline is also resetting the passwords of the Air India Frequent Flyer Program.