Breach at Indian Airline SpiceJet Affects 1.2 Million Passengers

News & Articles
, ,
1

SpiceJet, one of India’s largest privately owned airlines, suffered a data breach involving the details of more than a million of its passengers, a security researcher told TechCrunch. From the report:

airline spicejet sensitive data breach passenger 1Hack
airline spicejet sensitive data breach passenger 1Hack1390×926 321 KB

The security researcher, who described their actions as “ethical hacking” but whom we are not naming as they likely fell afoul of U.S. computer hacking laws, gained access to one of SpiceJet’s systems by brute-forcing the system’s easily guessable password. An unencrypted database backup file on that system contained private information of more than 1.2 million passengers of the budget-carrier last month, TechCrunch has learned. Each record included details such as name of the passenger, their phone number, email address and their date of birth, the researcher told TechCrunch.

  • Some of these passengers were state officials, they said. The database included a rolling month’s worth of flight information and details of each commuter, they said, adding that they believe that the database was easily accessible for anyone who knew where to look.
2 Likes