[BreachExchange] Bangkok Airways breach may have compromised customer data

[Sophia Kingsbury]

https://thethaiger.com/hot-news/technology/bangkok-airways-breach-may-have-compromised-customer-data

A cyberattack hit Bangkok Airways and now the boutique airline is warning
its customers of a possible compromise of personal data. The airline
released a statement on their website and sent email to its customers
informing them of the data breach.

Bangkok Airways first became aware of a possible hack on August 23 and
began investigating. They confirmed now that the security breach did not
access or affect any aeronautical security systems or any of the
operational data of Bangkok Airways. It did however create vulnerability to
some personal data of customers.

The investigation is ongoing to fully determine how much data was
compromised and how many passengers were affected. Bangkok Airways is
suggesting that their passengers check their bank accounts and credit card
statements to see if there was any unauthorized usage. They recommend
changing passwords and contacting any affected financial institutions and
follow any advice they may offer for further security.

Bangkok Airways also warns of the possibility of scammers taking advantage
of the data breach to attempt phishing attacks, contacting customers while
posing as airline employees following up on the data breach and asking
customers to confirm personal data. The airline stated they will NOT be
contacting any customers asking for personal data, so customers should not
share any personal information.

Bangkok Airways are also taking measures immediately to step up security on
their systems and strengthen their IT infrastructure, and has recruited
help from a leading cybersecurity firm.

The data breach comes just 4 days after Bangkok Airways relaunched their
flights between the Phuket Sandbox and the Samui Plus programs for the
Sandbox 7+7 extension, once again connecting the 2 popular tourist island
destinations.

Any affected customers or anyone with questions regarding the security
breach are advised to contact Bangkok Airways by email at
infosecurity at bangkokair.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20210830/1ac3f235/attachment.html>