Malaysia's Malindo Air, a subsidiary of Indonesia's Lion Group, became aware of a data breach involving the personal details of its passengers.
It was found that the details of around 30 million passengers of Malindo and fellow Lion Group subsidiary Thai Lion Air were posted in online forums.
The report said the leaked information included passengers' passport details, addresses, and phone numbers.
Malindo Air said it was notifying the authorities internationally about the incident and advised customers with online frequent flyer accounts to change their passwords.
TPRM report: https://scoringcyber.rankiteo.com/company/malindo-air
"id": "mal22610423",
"linkid": "malindo-air",
"type": "Data Leak",
"date": "09/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '30 million',
'industry': 'Aviation',
'location': 'Malaysia',
'name': 'Malindo Air',
'type': 'Airline'},
{'industry': 'Aviation',
'location': 'Thailand',
'name': 'Thai Lion Air',
'type': 'Airline'}],
'customer_advisories': ['Advised customers to change their passwords'],
'data_breach': {'number_of_records_exposed': '30 million',
'personally_identifiable_information': 'Yes',
'type_of_data_compromised': ['passport details',
'addresses',
'phone numbers']},
'description': "Malindo Air, a subsidiary of Indonesia's Lion Group, "
'experienced a data breach involving the personal details of '
"its passengers. The leaked information included passengers' "
'passport details, addresses, and phone numbers. The details '
'of around 30 million passengers of Malindo and fellow Lion '
'Group subsidiary Thai Lion Air were posted in online forums.',
'impact': {'data_compromised': ['passport details',
'addresses',
'phone numbers']},
'response': {'law_enforcement_notified': 'Yes',
'remediation_measures': ['Advised customers to change their '
'passwords']},
'title': 'Data Breach at Malindo Air',
'type': 'Data Breach'}