IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Air India cyber attack exposes 4.5 million customers’ data

The breach involved personal data registered over a ten year period including credit card, passport and date of birth information

Air India has stated that a cyber attack three months ago on the systems of its data processor, SITA, has affected around 4.5 million of its customers around the world.

The breach involved personal data registered over a ten year period, between 26 August 2011 and 3 February 2021. The details exposed include name, date of birth, contact information, passport information, ticket information, Star Alliance and Air India frequent flyer data, and credit card data.

“However, in respect of this last type of data, CVV/CVC numbers are not held by our data processor,” the company stated in a release.

Air India first received news of the incident from SITA on 25 February, but only found out the identity of the affected data subjects on 25 March and 5 April. Following the breach, a number of steps were taken including securing the compromised servers and notifying and liaising with credit card issuers.

A spokesperson from SITA told IT Pro that its passenger processing services were the target of a “highly sophisticated but limited cyber attack” which affected passenger data stored on servers in SITA PSS’s data centre in Atlanta, Georgia.

Related Resource

Defend your organisation from evolving ransomware attacks

Learn what it takes to reduce risk and strengthen operational resiliency

Defend your organisation from evolving ransomware attacks - whitepaper from VeritasDownload now

“By global and industry standards, we identified this cyber-attack extremely quickly. The matter remains under active investigation by SITA,” said the spokesperson.

The airline is encouraging its passengers to change passwords to ensure the safety of their personal data. 

In February this year, SITA disclosed that hundreds of thousands of passengers had their data stolen following a cyber attack on its systems. The company suffered a data breach on 24 February involving a portion of passenger data stored on its servers, which operate passenger processing systems on behalf of airlines including those compromising the Star Alliance group.

Featured Resources

Join the 90% of enterprises accelerating to the cloud

Business transformation through digital modernisation

Free Download

Delivering on demand: Momentum builds toward flexible IT

A modern digital workplace strategy

Free download

Modernise the workforce experience

Actionable insights and an optimised experience for both IT and end users

Free Download

The digital workplace roadmap

A leader's guide to strategy and success

Free Download

Recommended

Australian airports flag 5G interference warnings
5G

Australian airports flag 5G interference warnings

5 Jul 2022
Japan’s second biggest telco finally fixes network after three-day outage
Network & Internet

Japan’s second biggest telco finally fixes network after three-day outage

5 Jul 2022
Hackers claim to steal personal data of over a billion people in China
data breaches

Hackers claim to steal personal data of over a billion people in China

4 Jul 2022
Skills shortages expected to hit over 90% of Australian and New Zealand businesses
Careers & training

Skills shortages expected to hit over 90% of Australian and New Zealand businesses

28 Jun 2022

Most Popular

Raspberry Pi launches next-gen Pico W microcontroller with networking support
Hardware

Raspberry Pi launches next-gen Pico W microcontroller with networking support

1 Jul 2022
Universities are fighting a cyber security war on multiple fronts
cyber security

Universities are fighting a cyber security war on multiple fronts

4 Jul 2022
Hackers claim to steal personal data of over a billion people in China
data breaches

Hackers claim to steal personal data of over a billion people in China

4 Jul 2022