Cathay Pacific hit with data breach involving 9.4 million customers

Cathay Pacific is the latest airline to be battered by a major data breach.

In a statement released on its website, the Hong Kong-based international airline said roughly 9.4 million customers had their data accessed, but said there was “no evidence” that the information was misused.

Personal information such as names of passengers, their nationalities, dates of birth, telephone numbers, email, physical addresses, passport numbers, identity card numbers, and travel history was accessed. 

Credit card numbers exposed in the incident were from expired cards, or didn’t include CVV information. No passwords were compromised in the breach, and the airline said its flight information systems weren’t affected.

Cathay Pacific said it caught wind of suspicious activity on its network back in March, and confirmed that data was accessed in May. The airline said it took the time to figure out whether if the breach had any victims, and is notifying those directly affected by the incident. 

It comes a month after British Airways announced that it was hit by a data breach, in which the “personal and financial details” of customers were stolen.

Around 380,000 payment cards had been compromised, according to The Guardian, and the company promised financial compensation for affected customers.

Cathay Pacific has set up a website for customers who believe they have been affected by the data breach.