Details of millions of Thai Lion Air customers leaked online

[webfact]

Malaysia's Malindo Air confirms passenger data breach

Liz Lee, Stanley Widianto

 

Pictures © REUTERS

 

KUALA LUMPUR/JAKARTA, Sept 18 (Reuters) - Malaysia’s Malindo Air, a subsidiary of Indonesia’s Lion Group, said on Wednesday it was investigating a data breach involving the personal details of its passengers.

 

Malindo Air’s statement followed a report by Moscow-based cybersecurity firm Kaspersky Lab that the details of around 30 million passengers of Malindo and fellow Lion Group subsidiary Thai Lion Air were posted in online forums. The report said the leaked information included passengers’ passport details, addresses and phone numbers.

 

Lion Group and Thai Lion Air could not immediately be reached for comment.

 

Malindo Air said it was notifying authorities internationally about the incident and advised customers with online frequent flyer accounts to change their passwords.

 

It declined to provide more detail on its investigation, including how many customers were affected, but said it did not store any customer payment details on its servers.

 

“We are in the midst of notifying the various authorities both locally and abroad including CyberSecurity Malaysia,” it said in a statement. “Malindo Air is also engaging with independent cybercrime consultants to investigate and report into this incident.”

 

The files were uploaded and stored in an open Amazon Web Services (AWS) bucket, a public cloud storage resource. AWS, which is an external data service provider for Malindo, was not immediately available for comment.

 

Kaspersky said parts of the leaked databases were up for sale on the dark web.

 

Lion Air received global attention in October when one of its new Boeing 737 MAX jets crashed into the Java Sea, killing all 189 passengers and crew on board.

 

(Reporting by Liz Lee in Kuala Lumpur and Stanley Widianto in Jakarta; additional reporting by Jessica Damiana, Editing by Fanny Potkin and Jane Wardell)

 

-- © Copyright Reuters 2019-09-19

Follow Thaivisa on LINE for breaking Thailand news and visa info

[Katipo]

"The report said the leaked information included passengers’ passport details, addresses and phone numbers......Malindo Air said it was notifying authorities internationally about the incident and advised customers with online frequent flyer accounts to change their passwords."

 

With this amount of individual info now publicly available, I think the changing of passwords is going to be the least of many peoples' worries. This is a massive leak. 

[Tropposurfer]

Budget airlines, just too scary n tough for an old softie like me ! They probably already got my shoe size n favourite colour on the frigin web anyways????

[teutonian]

Sansiri PLC’s entire customer data set in the form of what appeared to be well over 40,000 purchase and sale agreement files, were left in an openly accessible directory online last year, according to a court statement made by Sansiri. 
 

they took zero action to inform any of their customers, authorities  or credit card processors.   
 

Sansiri is “Thailand most trusted developer” of condominiums and homes. 
 

 

[Bangkok Barry]

2 hours ago, Tropposurfer said:

Budget airlines, just too scary n tough for an old softie like me ! They probably already got my shoe size n favourite colour on the frigin web anyways????

 

Not only budget airlines. BA had a massive leak not long ago and I needed to get a new visa card. No matter what these companies say and promise about keeping your data safe, they just aren't up to the task. This happens over and over again. Use your passport or credit card or bank details for anything, and it is impossible not to, and you are vulnerable. Welcome to the modern world.

[GreasyFingers]

Maybe why so many sexy ladies are contacting me by email. But I have 4 addresses and only ever use No. 3 for airlines and No.4 for dodgy sites.

[4675636b596f75]

7 hours ago, webfact said:

Malindo Air said it was notifying authorities internationally about the incident and advised customers with online frequent flyer accounts to change their passwords.

It wasn't a breach of your password that leaked all this information.  The article says nothing about passwords.  

 

I do know about Amazon S3 Buckets.  

 

They should have hired me.

[hotchilli]

Low cost carrier... (LCC) how do you think they keeps operating costs down ?

[mehrdad]

Awful airline !!! Not recommended!!!

delay more than 2 hours every time!!!