"Air France, KLM Customers Warned of Loyalty Program Account Hacking"

Franco-Dutch airline company Air France-KLM has recently started informing Flying Blue customers of a data breach involving their user accounts.  Air France-KLM was formed in 2004 following the merger between Air France and KLM.  Flying Blue is their loyalty program, also used by Aircalin, Kenya Airways, TAROM, and Transavia.  Last week the company began notifying Flying Blue customers of suspicious activity on their accounts, saying that some of their personal information might have been compromised during the incident.  Potentially compromised data includes names, phone numbers, email addresses, Flying Blue numbers and level, miles balance, and last transaction.  According to Air France-KLM, no credit card data or payment information was exposed during the incident.  The company told the impacted customers that it has locked them out of their accounts and instructed them to reset their passwords.  It is currently unclear if hackers penetrated the company’s systems or if the customer accounts were accessed as a result of credential stuffing attacks, which are not uncommon these days.

SecurityWeek reports: "Air France, KLM Customers Warned of Loyalty Program Account Hacking"