2026 PIA — flight records forum sale claim (unverified); passport & PNR data alleged
Data compromised
Actor-claimed passenger flight records: first/last names, phone numbers, passport information, booking reference numbers (PNRs), flight numbers, routes, and travel dates—record volume not cited in indexed reporting
Technical writeup
Unverified criminal-forum claim — indexed July 7, 2026. A seller on the Russian-language Exploit.in forum (topic 286627) advertised an alleged Pakistan International Airlines (PIA) flight-records database, following prior underground marketing of PIA network access and customer data. The listing describes passenger names, phone numbers, passport details, PNR booking references, flight numbers, routes, and travel dates. PIA had not published a matching breach notice or regulator filing at catalog time, and no independent trade-press verification of sample freshness accompanied the July 2026 thread in indexed sources. BreachHistory indexes recordsAffected 0 pending attested counts. Distinct from the November 2020 KELA-reported sale of PIA domain-admin access and a separate customer database (names, phones, passports per CSO Online)—that earlier underground activity was never acknowledged by PIA and is not merged into this row without forensic linkage.
Root cause
Unverified Exploit.in underground forum listing advertising Pakistan International Airlines flight-record database for sale—PIA had not confirmed at catalog time