SpiceJet Confirms Data Breach of 1.2 Million Passenger Details
India's privately-owned airline SpiceJet has confirmed data breach of over a million of its passengers after a security researcher highlighted a security lapse in its systems.
A security researcher has highlighted a security lapse in SpiceJet's systems
The details included flight information and details of each passenger, including their name, phone number, email address, and date of birth
NEW DELHI : India's privately-owned airline SpiceJet has confirmed data breach of over a million of its passengers after a security researcher highlighted a security lapse in its systems.
According to TechCrunch, a security researcher, who described their actions as 'ethical hacking', gained access to one of the airline's systems by brute-forcing an easily-guessable password.
The database backup file on the system was unencrypted, allowing access to private information of more than 1.2 million passengers last month. The details included flight information and details of each passenger, including their name, phone number, email address, and date of birth.
The researcher had alerted SpiceJet about the database, but it was only after they informed government-run cybercrime agency CERT-In that the airline took necessary steps to protect its user database.
(Except for the headline, this story has not been edited by Scrabbl staff and is published from a syndicated feed.)