A cyber-attack on the website of the UK’s largest travel association, exposed 43,000 people, including 1,000 holidaymakers' information.
Holidaymakers' contact information, encrypted passwords, and confidential documents submitted to substantiate complaints about travel agencies were all accessible to the individual or group that infiltrated the website.
The police, the information commissioner, and the data watchdog have all been informed by Abta.
Source: https://www.databreaches.net/uk-43000-individuals-possibly-affected-after-abta-web-server-hacked/
TPRM report: https://scoringcyber.rankiteo.com/company/abta---the-travel-association
"id": "abt232628722",
"linkid": "abta---the-travel-association",
"type": "Breach",
"date": "03/2017",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 43000,
'industry': 'Travel and Tourism',
'location': 'UK',
'name': 'UK’s Largest Travel Association',
'type': 'Travel Association'}],
'attack_vector': 'Website Infiltration',
'data_breach': {'data_encryption': 'Encrypted Passwords',
'number_of_records_exposed': 43000,
'personally_identifiable_information': 'Contact Information',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Contact Information',
'Encrypted Passwords',
'Confidential Documents']},
'description': 'A cyber-attack on the website of the UK’s largest travel '
'association, exposed 43,000 people, including 1,000 '
"holidaymakers' information. Holidaymakers' contact "
'information, encrypted passwords, and confidential documents '
'submitted to substantiate complaints about travel agencies '
'were all accessible to the individual or group that '
'infiltrated the website.',
'impact': {'data_compromised': ['Contact Information',
'Encrypted Passwords',
'Confidential Documents'],
'systems_affected': ['Website']},
'regulatory_compliance': {'regulatory_notifications': True},
'response': {'law_enforcement_notified': True},
'threat_actor': 'Unknown',
'title': "Cyber Attack on UK's Largest Travel Association",
'type': 'Data Breach'}