KLM and other airlines informed the customers of Flying Blue that some of their personal information was exposed following a breach of their accounts.
An unauthorized entity suspiciously used these accounts and thus immediate corrective action was taken to prevent further exposure of data.
However, the breached information included the names, email addresses, phone numbers, latest transactions, and Flying Blue information.
Additionally, the accounts of affected customers were locked due to the breach and they were also asked to change their passwords on the KLM and Air France websites.
Source: https://heimdalsecurity.com/blog/air-france-and-klm-alert-customers-of-account-security-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/klm
"id": "klm2289123",
"linkid": "klm",
"type": "Breach",
"date": "01/2023",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Aviation',
'name': 'KLM',
'type': 'Airline'},
{'industry': 'Aviation',
'name': 'Air France',
'type': 'Airline'}],
'data_breach': {'personally_identifiable_information': ['names',
'email addresses',
'phone numbers'],
'type_of_data_compromised': ['names',
'email addresses',
'phone numbers',
'latest transactions',
'Flying Blue information']},
'description': 'KLM and other airlines informed the customers of Flying Blue '
'that some of their personal information was exposed following '
'a breach of their accounts. An unauthorized entity '
'suspiciously used these accounts and thus immediate '
'corrective action was taken to prevent further exposure of '
'data. The breached information included the names, email '
'addresses, phone numbers, latest transactions, and Flying '
'Blue information. Additionally, the accounts of affected '
'customers were locked due to the breach and they were also '
'asked to change their passwords on the KLM and Air France '
'websites.',
'impact': {'data_compromised': ['names',
'email addresses',
'phone numbers',
'latest transactions',
'Flying Blue information']},
'response': {'communication_strategy': 'Customers were informed and advised '
'to change passwords',
'containment_measures': ['Accounts locked', 'Passwords changed']},
'threat_actor': 'Unauthorized entity',
'title': 'KLM and Flying Blue Data Breach',
'type': 'Data Breach'}