|
Malindo Air confirmed the breach last week after Moscow-based
cybersecurity firm Kaspersky alerted users in Malaysia and
Thailand.
Kaspersky told Reuters in an email it had sent out an alert on
Sept. 13, two days after the data breach was made public.
Kaspersky said in its alert that the personal details of almost
46 million passengers of Malindo and Thai Lion Air, another Lion
Group subsidiary, were posted online. Kaspersky said parts of
the leaked databases were offered for sale.
Malindo Air said in a statement that two former employees of
e-commerce services provider GoQuo (M) Sdn Bhd in their
development center in India "improperly accessed and stole the
personal data of our customers".
Reuters could not immediately reach GoQuo for comment. Phone
numbers for GoQuo's offices in India and Malaysia listed on the
company's website did not go through. Malindo did not name the
two former GoQuo employees.
The airline said the data breach had been contained and the
matter has been reported to the police in Malaysia and India.
Malindo Air also said the breach was not related to the security
of cloud service provider Amazon Web Services' data
architecture, and none of the payment details of customers were
compromised.
(Reporting by Liz Lee; Editing by Muralikumar Anantharaman)
[© 2019 Thomson Reuters. All rights
reserved.] Copyright 2019 Reuters. All rights reserved. This material may not be published,
broadcast, rewritten or redistributed.
Thompson Reuters is solely responsible for this content.
|
