Researchers found that Canadian Flair Airlines left email addresses and login information for private databases available for at least seven months.
Due to this, there was a higher chance that travelers' private information, like emails, names, and addresses, would get into the wrong hands.
On the flyflair.com website, publicly available environment files made up the breach. The 2005-founded Canadian ultra-low-cost airline Flair Airlines owns the website flyflair.com.
When vulnerabilities are discovered, the Cybernews Research team advises Flair or any organization to promptly reset compromised keys and credentials, safeguard client data, and think about relocating vulnerable infrastructure to different hosts.
Source: https://securityaffairs.com/151512/data-breach/canadian-flair-airlines-data-leak.html
TPRM report: https://scoringcyber.rankiteo.com/company/flair-airlines
"id": "fla03721023",
"linkid": "flair-airlines",
"type": "Data Leak",
"date": "09/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Aviation',
'location': 'Canada',
'name': 'Flair Airlines',
'type': 'Airline'}],
'attack_vector': 'Exposed Environment Files',
'data_breach': {'personally_identifiable_information': ['Names', 'Addresses'],
'type_of_data_compromised': ['Email addresses',
'Login information',
'Names',
'Addresses']},
'description': 'Researchers found that Canadian Flair Airlines left email '
'addresses and login information for private databases '
'available for at least seven months. This increased the risk '
"of travelers' private information, such as emails, names, and "
'addresses, being compromised.',
'impact': {'data_compromised': ['Email addresses',
'Login information',
'Names',
'Addresses'],
'systems_affected': ['Private Databases']},
'recommendations': ['Reset compromised keys and credentials',
'Safeguard client data',
'Consider relocating vulnerable infrastructure to '
'different hosts'],
'references': [{'source': 'Cybernews Research Team'}],
'response': {'remediation_measures': ['Reset compromised keys and credentials',
'Safeguard client data',
'Consider relocating vulnerable '
'infrastructure to different hosts']},
'title': 'Flair Airlines Data Exposure Incident',
'type': 'Data Exposure',
'vulnerability_exploited': 'Publicly Available Environment Files'}