2025 — "A data breach stemming from a third-party customer…
Data compromised
Unknown
Technical writeup
"A data breach stemming from a third-party customer service database has affected European airlines Air France and KLM Royal Dutch Airlines. Air France-KLM Group said it learned of the cyber intrusion after detecting “unusual activity on an external platform” it uses for customer service.However, Have I Been Pwned’s Troy Hunt shared a KLM data breach notification stating that the cyber intrusion leaked the customer’s first and family name, contact details, Flying Blue mile number and tier level, and the subject of service request emails."
Root cause
Hacking: Use of stolen creds
References
- https://www.govinfosecurity.com/airlines-klm-air-france-detail-customer-data-breach-a-29143
- https://dailygalaxy.com/2025/08/this-airline-hit-by-cyberattack-your-names-emails-and-account-numbers-have-leaked-and-thats-not-all/
- https://www.cpomagazine.com/cyber-security/air-france-klm-group-confirms-data-breach-from-a-third-party-customer-service-system/
- https://www.cpomagazine.com/cyber-security/air-france-klm-group-confirms-data-breach-from-a-third-party-customer-service-system/