Researchers found that Canadian Flair Airlines left email addresses and login information for private databases available for at least seven months.
Due to this, there was a higher chance that travelers' private information, like emails, names, and addresses, would get into the wrong hands.
On the flyflair.com website, publicly available environment files made up the breach. The 2005-founded Canadian ultra-low-cost airline Flair Airlines owns the website flyflair.com.
When vulnerabilities are discovered, the Cybernews Research team advises Flair or any organization to promptly reset compromised keys and credentials, safeguard client data, and think about relocating vulnerable infrastructure to different hosts.
Source: https://securityaffairs.com/151512/data-breach/canadian-flair-airlines-data-leak.html
"id": "FLA03721023",
"linkid": "flair-airlines",
"type": "Data Leak",
"date": "09/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"