Transavia data leak could affect 80,000 passengers

mood · Feb 24, 2020

Transavia data leak could affect 80,000 passengers
February 24, 2020
https://nltimes.nl/2020/02/24/transavia-data-leak-affect-80000-passengers

The data of 80 thousand Transavia passengers leaked out after an e-mail inbox containing the data was breached, the Dutch low-cost flyer said on Monday. The data that was released includes passengers’ full names, date of birth, flight information, booking number, luggage purchase, and additionally requested services like wheelchair assistance.

Affected passengers include anyone who flew on the airline between January 21 and January 31, 2015. The only passengers whose data was not included are those who traveled to the Canary Islands, Egypt, or the Lapland region of Finland.

“We have recently found that there has been a case of unwanted access to a Transavia mailbox,” the airline said in a statement to passengers
The airline stopped short of saying a hacker stole the data, only stating that it was a form of “unwanted access.”
The airline pledged to improve its cybersecurity measures to prevent recurrence.
Click to expand...

mood · Nov 12, 2021

Transavia airline fined for weak security practices that led to data breach
November 12, 2021
https://therecord.media/transavia-airline-fined-for-weak-security-practices-that-led-to-data-breach/

The Dutch Data Protection Agency has levied a €400,000 ($455,000) fine today against Transavia, a Dutch airline that operates low-cost routes across Europe, for a security breach that allowed a hacker to steal the personal details of more than 83,000 passengers.

The fine pertains to a security breach that Transavia publicly disclosed in February 2020.
Click to expand...

Breach could have affected 25 million passengers
But in a press release today, the DPA said that after an investigation into the incident, the agency ruled that the airline was at fault.

But while the actual data stolen by the hacker was small in size, the DPA said that the same Transavia employee accounts that the hackers hijacked also had access to systems that housed the details of more than 25 million airline customers.

“There are no indications that the hacker also viewed or copied this data, but the possibility was there due to the poor security,” the DPA said today in a press release announcing the fine.
Click to expand...

Transavia used simple passwords, no 2FA
“It is very serious that a hacker could have access to the personal data of millions of people by entering the system with a very simple password,” said DPA board member Katja Mur.

“Truly a password that has been at the top of lists of most used passwords for years, along the lines of ‘123456,’ ‘Welcome’ and ‘password’,” she added.
“And not only that: other important barriers to make it difficult for a hacker were also missing,” Mur said.
Click to expand...

Log in or Sign up

Transavia data leak could affect 80,000 passengers

mood Updates Team

mood Updates Team