AIRDO and Solaseed Air have disclosed that customer email addresses were exposed after attackers accessed an external email-delivery system used to send booking and flight-related messages. AIRDO said the affected list could contain up to 673,920 addresses, while Solaseed Air reported about 490,000. Both airlines have suspended the affected mail services.
In its November 5 notice, AIRDO said it had received a report that customer email addresses sent through the external system had leaked. The airline said it blocked unauthorized access and stopped the service. The outage affects booking, purchase, change and refund messages, online check-in barcode emails, flight-status notices about delays and cancellations, and some My AIRDO account notifications. The company also said several contact forms were not working properly.
Solaseed Air’s notice, updated on November 5, traces the incident to a supplier report received on October 28. The provider initially told the airline on October 30 that no Solaseed data had leaked, but on November 2 it warned that customer email addresses might have been taken. Solaseed said it identified the affected count on November 4 and confirmed that email addresses were the exposed information. The airline said names, addresses, phone numbers and credit-card information were not leaked, and that it had reported the incident to Japan’s Personal Information Protection Commission.
Neither airline named the external provider in its public notice. Solaseed said reservation and boarding-related emails had been stopped since October 31, while AIRDO said its affected mail services would remain suspended until further notice. Neither notice gave a restoration date.
The disclosures concern the airlines’ external email-delivery systems, rather than the reservation-platform incident reported by Singapore Airlines, where about 46,000 booking records were accessed. They are also separate from the Qantas breach that resulted in stolen customer data being published online.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
SIGN UP FOR NEWSLETTERS
Please confirm your email address.
Sign up for cybersecurity newsletter and get latest news updates delivered straight to your inbox. You are also consenting to our Privacy Policy and Terms of Use.