FlyerTalk Forums - 9.4 million passengers’ data stolen from CX

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)

- Cathay Pacific | Cathay (https://www.flyertalk.com/forum/cathay-pacific-cathay-487/)

- - 9.4 million passengers’ data stolen from CX (https://www.flyertalk.com/forum/cathay-pacific-cathay/1937167-9-4-million-passengers-data-stolen-cx.html)

Quote:

Originally Posted by FlyPointyEnd (Post 30353675)

All of my DM friend's already got an email. Maybe they are informing people based on MPO status first hehehe

Priority Service for DM at all times. Time for win (yay!).

a mate says this is what staff can see in the back system. methinks the breach is much bigger than this otherwise whats the (muting) point of issuing a statement at 2300hrs in HK

Quote:

Originally Posted by txflyer77 (Post 30350774)

https://twitter.com/benjaminbland/st...331503616?s=21

Cathay is directing questions to an unverified twitter account. What a clown show.

https://twitter.com/cathaypacific/st...444854273?s=21

actually asiamiles twitter is unverified too

Quote:

Originally Posted by 1010101 (Post 30353684)

I haven't had the email and I was flying CX almost weekly up until March, though I never joined AM. It would make sense if they sent them out in tranches, 9.4 million is a huge amount to send in one hit.

CX could have started when they first found out about it.

I have received the email, and I'm SL; the following were stolen from me:

The following types of personal data about you were accessed:

Date of Birth
Name
Nationality
Telephone Number
Title

Your travel or loyalty profile was not accessed in full, and your password was not compromised.

I used their Experian and their initial report already told me things like email/passwords were sold/listed online somewhere... I suggest all to change your passwords anyways even though they did not mention that your passwords have been compromised.

I assume we all get compromised, if 9.4m pax were. I got similar emails to above this afternoon.

Anyone have experience with the Experian IdentityWorks thing?

Quote:

Originally Posted by blum81 (Post 30353677)

What MP status are you?

My wife is at gold and parents are at silver but neither of them received the email.

Wonder if they are they really sending emails out according to MP levels? lol.

Looks like my wife just got the email from Cathay. I'm assuming Golds are now beginning to receive the email notification.

Quote:

Originally Posted by kaka (Post 30353703)

otherwise whats the (muting) point of issuing a statement at 2300hrs in HK

That might be so that it was outside the trading day for anywhere that Cathay or Swire shares are listed. There are rules about when you can make price-sensitive announcements.

Yes I got the Dear Diamond member email too
Maybe ask the GRU Fancy Bear division if we can have our data back

This is what you get in HKG for HKD 350,000 per month salary ++
Wait till shxt happens then whinge and threaten to make new laws
Cathay decision not to inform of leak 'unethical' - RTHK

finally my turn. (just me so far)

Email Address
Name
Telephone Number
Title

Here's what they got for me:

The following types of personal data about you were accessed:

Date of Birth
Email Address
Name
Nationality
Telephone Number
Title
Travel Document Number

Your travel or loyalty profile was not accessed in full, and your password was not compromised.

Quote:

Originally Posted by QRC3288 (Post 30353894)

Here's what they got for me:

The following types of personal data about you were accessed:

Date of Birth
Email Address
Name
Nationality
Telephone Number
Title
Travel Document Number

Your travel or loyalty profile was not accessed in full, and your password was not compromised.

Quote:

Originally Posted by hphreak (Post 30353779)

I have received the email, and I'm SL; the following were stolen from me:

The following types of personal data about you were accessed:

Date of Birth
Name
Nationality
Telephone Number
Title

Quote:

Originally Posted by randomeejit (Post 30353663)

What happened?

As part of our ongoing IT security processes, we discovered unauthorised access to some of our passenger data.

We initially discovered suspicious activity on our network in March this year. Upon discovery, we took immediate action to contain the event, to commence a thorough investigation with the assistance of a leading cybersecurity firm, and to further strengthen our IT security measures. Unauthorised access to certain personal data was confirmed in early May. Since that time, analysis of the data has continued in order to identify affected individuals and to determine whether the data at issue could be reconstructed.

We have no evidence that any personal data has been misused. We recommend that you follow the steps outlined in this notice to help protect yourself against potential risks.
What information was involved?

The following types of personal data about you were accessed:

Date of Birth
Email Address
Name
Nationality
Telephone Number
Title
Travel Document Number

This is what i got

Quote:

Originally Posted by blum81 (Post 30353649)

interesting. seems it's different for everyone.

Here's what I got.

Address
Date of Birth
Email Address
Name
Nationality
Telephone Number
Title

Quote:

Originally Posted by FlyPointyEnd (Post 30353616)

Here's the information taken from me,

Address
Date of Birth
Name
Nationality
Telephone Number
Title
Travel Document Number

a friend of mine got the following

Date of Birth
Email Address
HKID Number
Name
Nationality
Permit Number
Telephone Number
Title
Travel Document Number

That's a lot of info....

Quote:

Originally Posted by Nicc HK (Post 30353151)

The following types of personal data about you were accessed:

HKID Number
Name
Nationality
Title
Travel Document Number

sorry for multi quoting but i am wondering if they is what you have saved on your MPO profile.
I have my address in the profile too but not nationality/passport number saved. i wonder if there's any correlation.

I have passport details saved in the account but those were not taken, so no correlation for me.

Quote:

Originally Posted by hphreak (Post 30353918)

I have passport details saved in the account but those were not taken, so no correlation for me.

same for me

Some questions that I am unclear about

1. Does this only affect MPO / AM members / registered account members or are guests affected?
2. Only revenue fares or AM /redemptions or both?
2. Are third party (eg Expedia ) bookings affected
3. Even better are CX redemption via OW affected

I haven't received any email, because I don't generally book CX revenue. But have booked a few redemption using AM and BAEC

Edit: I received one just as a I typed! Bad but not the end of the world.

Address
Name
Title