Originally Posted by
cathaychap
I believe what Cathay is saying is that nobody has had their full profile taken. It's more bits of data taken. Like a few numbers of a passport and half an email address. At any rate, visit infosecurity.cathaypacific.com if concerned. The good thing is that CX, unlike BA, has a coordinated response to the threat. I had to cancel two credit cards with the BA thing.
I do not doubt Cathay's honesty in what they say, but I doubt their ability to know the situation. They clearly have a substandard IT team given how often simple functionality on their website is down (not to mention the ink cartridges in their lounge printers). They either didn't spot this for months or sat on it for months, neither of which inspires confidence. I see no grounds for Cathay to have well-placed confidence that their assessment of the data theft is full and complete.