Air China

Air China suspends flight attendant over personal data breach involving 20 celebrities

Employee was accused of publishing personal information on social media about famous passengers, including Jing Boran, Ni Ni, Zhang Jie, Du Juan and Su Bingtian.

Compromised information included details of their flight records, membership card status, nationality and date of birth.

Source: https://www.scmp.com/news/china/society/article/3044682/air-china-suspends-flight-attendant-over-personal-data-breach

TPRM report: https://scoringcyber.rankiteo.com/company/air-china

"id": "air203261222",
"linkid": "air-china",
"type": "Data Leak",
"date": "01/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': ['Jing Boran',
                                               'Ni Ni',
                                               'Zhang Jie',
                                               'Du Juan',
                                               'Su Bingtian'],
                        'industry': 'Aviation',
                        'location': 'China',
                        'name': 'Air China',
                        'type': 'Airline'}],
 'attack_vector': 'Human Error',
 'data_breach': {'number_of_records_exposed': 20,
                 'personally_identifiable_information': ['Nationality',
                                                         'Date of birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Flight records',
                                              'Membership card status',
                                              'Nationality',
                                              'Date of birth']},
 'description': 'An Air China flight attendant was accused of publishing '
                'personal information on social media about famous passengers, '
                'including Jing Boran, Ni Ni, Zhang Jie, Du Juan, and Su '
                'Bingtian. Compromised information included details of their '
                'flight records, membership card status, nationality, and date '
                'of birth.',
 'impact': {'data_compromised': ['Flight records',
                                 'Membership card status',
                                 'Nationality',
                                 'Date of birth']},
 'motivation': 'Unknown',
 'threat_actor': 'Air China Flight Attendant',
 'title': 'Air China Flight Attendant Suspended Over Data Breach Involving '
          'Celebrities',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Insider Threat'}