Millions of Lion Air Passenger Records Exposed and Exchanged on Forums

guest · Sep 17, 2019

Millions of Lion Air Passenger Records Exposed and Exchanged on Forums
September 17, 2019
https://www.bleepingcomputer.com/ne...nger-records-exposed-and-exchanged-on-forums/

Tens of millions of records from customers of two airline companies owned by Lion Air have been circulating on data exchange forums for at least a month. The info was stored in an Amazon bucket that was open on the web.

The records are present in two databases, one with 21 million records, the other with 14 million entries, in a directory holding backup files created in May 2019 mostly for Malindo Air and Thai Lion Air.
Sensitive personal information exposed
Leaked details include passenger and reservation IDs, physical addresses, phone numbers, email addresses, names, dates of birth, phone numbers, passport numbers, and passport expiration dates.
Data circulating for at least a month
It is unclear when the data was first accessed, but one user that collects sensitive information from various data exchange forums published on their website the link to the open AWS bucket on August 10.
Click to expand...

guest · Sep 18, 2019

Malaysia's Malindo Air confirms passenger data breach, advises frequent flyers to change passwords
September 18, 2019
https://www.straitstimes.com/asia/s...data-breach-advises-frequent-flyers-to-change

Malaysia's Malindo Air, a subsidiary of Indonesia's Lion Group, said on Wednesday (Sept 18) that it was investigating a data breach involving the personal details of its passengers.

Malindo Air's statement followed a report by Moscow-based cyber-security firm Kaspersky Lab that the details of around 30 million passengers of Malindo and fellow Lion Group subsidiary Thai Lion Air were posted in online forums.
The report said the leaked information included passengers' passport details, addresses and phone numbers.

It declined to provide more details on its investigation, including how many customers were affected, but said it did not store any customer payment details on its servers.
Click to expand...

guest · Sep 23, 2019

Cybersecurity firm Kaspersky denies reports on releasing Lion Group’s data breach report
September 23, 2019
https://www.marketing-interactive.c...-on-releasing-lion-groups-data-breach-report/

Moscow-based cybersecurity firm Kaspersky has denied producing a report on the recent Lion Group data leak, which affected Malindo Air and Thai Lion Air. The allegation that Malindo Air’s statement followed a report by Kaspersky about the airlines’ data breach and that Kaspersky had said part of the leaked databases were up for sale on the dark web was reported by several media outlets such as Reuters and CNA.

In a statement to A+M, a Kaspersky spokesperson said it had sent an alert to its Kaspersky Security Cloud users in Thailand and Malaysia on 13 September, two days after information about the Malindo Air and Thai Lion Air data breach went public. The alert aims to notify users of the breach and ask them to treat incoming emails, text messages, and calls with additional caution. It was done via Security News, a in-product component used to rapidly inform Kaspersky’s users about important cybersecurity-related news emerging in the public domain.

However, the spokesperson said that Kaspersky has “never produced a report or any other specific intelligence” on the Lion Group airlines data leak and added that the information was earlier reported by Under the Breach twitter channel.
Click to expand...

guest · Sep 23, 2019

Malindo Air says data leak caused by ex-staffers at contractor firm
September 23, 2019
https://www.reuters.com/article/us-...-ex-staffers-at-contractor-firm-idUSKBN1W80DT

Malindo Air, the Malaysian subsidiary of Indonesia’s Lion Group, said on Monday that two former employees of its e-commerce contractor were responsible for its passenger data breach.

Malindo Air said in a statement that two former employees of e-commerce services provider GoQuo (M) Sdn Bhd in their development center in India “improperly accessed and stole the personal data of our customers”.
The airline said the data breach had been contained and the matter has been reported to the police in Malaysia and India.
Malindo Air also said the breach was not related to the security of cloud service provider Amazon Web Services’ data architecture, and none of the payment details of customers were compromised.
Click to expand...

guest · Oct 7, 2019

Malindo Air Data Breach Included Advance Flight Booking Information
October 7, 2019
https://www.lowyat.net/2019/195609/...-included-advance-flight-booking-information/

Its close to 3 weeks now since Malindo Air first confirmed that they had suffered a massive data breach affecting millions of it’s passengers’ personal information.

While it is already known that Customer’s personal contact details as well as Passport information was leaked together with their flight booking details – it was assumed that these were limited to only historic flight bookings. Unfortunately, we can now independently confirm that advance flight booking information was also included in the leaked files.
While there is very little risk associated with the historical travel information, advance flight bookings details could be easily misused and manipulated by anyone who has access to the leaked files. This information puts travelers at risk as their future travel details and dates have been leaked out.

While most of the reports on the breach so far have been based off the dumping of 4 files on the darkweb as well as on file sharing platforms, there are about 18 backup files of information that were siphoned off the Amazon S3 bucket that was left open to public access.
Click to expand...

Log in or Sign up

Millions of Lion Air Passenger Records Exposed and Exchanged on Forums

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Millions of Lion Air Passenger Records Exposed and Exchanged on Forums

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches