UK watchdog fines Cathay Pacific over massive data breach

[zanderthunder]

 

HONG KONG (AFP): Hong Kong carrier Cathay Pacific has been fined HK$5 million (RM2.7mil) by Britain's privacy watchdog over a huge data leak of more than nine million customers including passport numbers and credit card details.

 

The Information Commissioner's Office (ICO) said in a statement on Wednesday (March 4) that it has ordered the airline to pay £500,000 for "failing to protect the security of its customers' personal data".

 

Between October 2014 and May 2019, a lack of security measures on the carrier's computer systems led to a massive data breach involving 9.4 million customers around the world -- including 111,578 from the UK -- according to the ICO.

 

"People rightly expect when they provide their personal details to a company, that those details will be kept secure to ensure they are protected from any potential harm or fraud," Steve Eckersley, ICO Director of Investigations said.

 

"That simply was not the case here."

 

He added that multiple serious deficiencies they found "fell well below" standard and the airline failed to satisfy four out of five of the National Cyber Security Centre's basic guidance.

 

The Hong Kong-based airline in October 2018 admitted that about 860,000 passport numbers, 245,000 Hong Kong identity card numbers, 403 expired credit card numbers and 27 credit card numbers with no card verification value (CVV) were accessed.

 

Other compromised passenger data included nationalities, dates of birth, phone numbers, emails, and physical addresses. - AFP

 

Source: UK watchdog fines Cathay Pacific over massive data breach (via TheStar Online)

[mp68terr]

In case, £500,000 is about US$645,000, about €578,000.

[zanderthunder]

2 hours ago, mp68terr said:

In case, £500,000 is about US$645,000, about €578,000.

That's a huge amount tho.