Go Back  FlyerTalk Forums > Miles&Points > Airlines and Mileage Programs > TAP Air Portugal | Miles&Go
Reload this Page >

Trouble logging in to Website? Cyberattack August-September 2022

Trouble logging in to Website? Cyberattack August-September 2022

Old Sep 30, 22, 10:34 am
  #46  
Moderator, Iberia Airlines, Airport Lounges, and Ambassador, British Airways Executive Club
 
Join Date: Feb 2010
Programs: BA Lifetime Gold; Flying Blue Life Platinum; LH Sen.; Hilton Diamond; Kemal Kebabs Prized Customer
Posts: 58,402
Here are some further details from TAP about this.

Originally Posted by TAP
September 21, 2022
TAP has recently been the victim of a cyber-attack, which was promptly reported to all the relevant authorities. TAP has been closely cooperating with authorities, in particular with the Portuguese Criminal Police and the Cybersecurity National Centre, on the investigation of these events since August 25. While TAP has immediately deployed the appropriate cyber security measures and procedures for this type of events with the support of an industry-leading international IT and forensic expert (Microsoft), the attackers had been able to illegitimately access personal data from some customers of TAP. The measures adopted made it possible to guarantee the availability and integrity of the data and the safe operation of all TAP systems.

Although cyber-attacks are a regular threat to many businesses, TAP immediately took containment and remediation measures to protect all owned or managed data. Regretfully, we want to inform that the following categories of personal data from some customers of TAP have been disclosed: name, nationality, gender, date of birth, address, email, telephone contact, customer registration date and frequent flyer number. The information for each affected customer may vary. We are releasing this notice to make customers aware of this matter. There is no indication that payment data was exfiltrated from TAP’s network.

Disclosure of personal data through open sources may increase the risk of its illegitimate use, namely with the purpose of obtaining other data that may compromise digital systems to perpetrate fraud (phishing).
Although the access password for Miles&Go or customers’ reserved area is not among the personal data that was compromised, as a matter of precaution, we recommend checking the security conditions our customers use to access their reserved area, namely by using a strong password and changing it frequently. We also recommend customers to stay cautious of any unsolicited communications that ask for personal information and to avoid clicking on links or downloading attachments from suspicious emails. Please note that following this public announcement, TAP will not send direct messages on this subject to individual customers by any means.
We sincerely apologize to our affected customers that their personal data has been released and for any inconvenience it may cause. We would like to reinstate our commitment towards the protection of our customers’ personal data for which we are developing additional measures to continue reinforcing its security.

Below are FAQs about the event and further information that may be useful.
We thank you for your understanding!
https://www.flytap.com/en-pt/important-information

You can use these contacts to find out more about your personal circumstances:
[email protected]
+442036953214 (UK number - this is actually a Shropshire telemarketing company)
800204692 (Portugal number)
corporate-wage-slave is offline  
Old Oct 1, 22, 3:08 am
  #47  
 
Join Date: Jan 2007
Location: Canary Wharf, London
Programs: MyWaitrose, IC Spire Ambassador, Hilton Diamond & BAEC Gold
Posts: 2,612
Please note that following this public announcement, TAP will not send direct messages on this subject to individual customers by any means.
I guess they hope most people won't notice!
chistery is offline  
Old Oct 1, 22, 3:44 am
  #48  
FlyerTalk Evangelist
 
Join Date: Mar 2014
Location: 4éme
Posts: 10,862
Originally Posted by chistery View Post
I guess they hope most people won't notice!
You'd think that notifications would be required.
TomMM is offline  
Old Oct 1, 22, 4:20 am
  #49  
 
Join Date: Jun 2018
Posts: 745
To quote corporate wage slave a few posts above:

”The law requires TAP to contact all those involved within 3 days of them knowing about the compromise of that particular piece of data”.

Honestly, quite disgusted. Amateur hour.
Tofino87 is offline  
Old Oct 1, 22, 5:30 am
  #50  
 
Join Date: Sep 2020
Posts: 160
Where is the news? TAP just breaking the law another time, as with refunds, cancellations, duty of care...

Poor Portuguese paying tons of tax money to incompetent politicians and management.

I wonder how many millions they will have to pay for LH to take this garbage airline for €1.

I am looking for lawyers to sue them like BA as I am already getting spam from the leak but wasn't informed.

I just wonder whether the CEO will have enough time to visit all TP destinations in C in time... :-)
estrela is offline  
Old Oct 1, 22, 3:20 pm
  #51  
 
Join Date: Jan 2009
Posts: 205
Originally Posted by chistery View Post
The TAP spam has started. Just received an email about an “Heir Hunter” to an address only known by TAP.
I have had a very noticeable increase in spam mail in the last two weeks.. I was wondering what might have been the reason..
galeaoguy is offline  
Old Oct 3, 22, 10:29 am
  #52  
 
Join Date: Aug 2004
Location: Houston, TX
Posts: 97
Originally Posted by Angostura View Post
FWIW, I have a similar problem. I can log into my TAP account (it's just a TAP login, not M&G), and my reservation shows up under my reservations, but when I click on "Manage Booking" I get the "Sorry, we are unable to process your request." message. Checkmytip.com can't seem to find it either. The call center assures me the reservation exists and all is well, but I can't access the reservation to add a FF#, seat assignment, etc.

Has anyone with this problem had any issues with OLCI, or has everything worked normally once the 36-hr window opens?
Checked this morning, and when clicking on "Manage Reservation" I got a prompt for two-factor authorization to let me access the reservation, which worked. Anyone else having this issue might want to check again.
Angostura is offline  
Old Oct 4, 22, 1:55 am
  #53  
 
Join Date: May 2022
Location: Lancashire, UK
Posts: 28
After 4-5 weeks of not being able to see anything more than a general overview; I've been able to manage my booking since this weekend (with the two factor authentication mentioned above). The app still comes up with a generic error though.
wilkobrfc is offline  
Old Oct 4, 22, 11:22 pm
  #54  
 
Join Date: Mar 2016
Posts: 7
I came on here to see if anyone had managed to successfully check their bookings on TP's website recently, and saw the latest update on 2FA. I went back to do the same, was prompted for 2FA, but still ended up with a "Booking not Found" error message. It is quite frustrating, as I was able to view the booking before.

It is a codeshare itinerary, so I am still seeing the TP-operated sectors via the SQ app/website, and CheckmyTrip, just not on TP's own website/app. Should I be concerned? If my booking isn't found, would it be problematic for online checking later? It is really stressful flying TP. Thanks.

Last edited by kurogoma; Oct 4, 22 at 11:33 pm
kurogoma is offline  
Old Oct 5, 22, 3:42 pm
  #55  
Moderator, Iberia Airlines, Airport Lounges, and Ambassador, British Airways Executive Club
 
Join Date: Feb 2010
Programs: BA Lifetime Gold; Flying Blue Life Platinum; LH Sen.; Hilton Diamond; Kemal Kebabs Prized Customer
Posts: 58,402
Originally Posted by kurogoma View Post
It is a codeshare itinerary, so I am still seeing the TP-operated sectors via the SQ app/website, and CheckmyTrip, just not on TP's own website/app. Should I be concerned? If my booking isn't found, would it be problematic for online checking later? It is really stressful flying TP. Thanks.
What matters is whether you hold a ticket number on the SQ app / website. If so then normally it will be fine since that is actually more relevant than a PNR / locator.
corporate-wage-slave is offline  
Old Oct 5, 22, 6:10 pm
  #56  
 
Join Date: Mar 2016
Posts: 7
Originally Posted by corporate-wage-slave View Post
What matters is whether you hold a ticket number on the SQ app / website. If so then normally it will be fine since that is actually more relevant than a PNR / locator.
Yes, I do have a ticket number on the SQ app/website for my itinerary, which works (as well as the PNR) to pull up my flights on SQ app/website but both doesn't work on the TP website/app.
kurogoma is offline  
Old Oct 11, 22, 7:19 am
  #57  
HGB
 
Join Date: Aug 2011
Location: Paris
Programs: AF Club 2000/ QR Gold/ TK Platinum/ Amex FB Platinium/ Visa Infinite Platinium
Posts: 27
Seems fixed, at least for my account

Originally Posted by faroooq View Post
I was wondering if anyone else was having trouble logging in to the TAP Miles&go account. I noticed on their website that they were a target of a cyber attack. Has anyone else been able to login? The system won't even allow me to reset my password.
Tried logging in today and no problem but I changed my password just in case. And true TAP customers service is extremely slow to say the least.
HGB is offline  
Old Oct 14, 22, 1:14 pm
  #58  
prh
 
Join Date: Oct 2002
Location: Kamuela, Hawaii
Programs: AA Platinum Plus; One World Emerald
Posts: 480
I can’t get on today. Anyone else having that problem?
prh is offline  
Old Oct 14, 22, 1:33 pm
  #59  
Moderator, Iberia Airlines, Airport Lounges, and Ambassador, British Airways Executive Club
 
Join Date: Feb 2010
Programs: BA Lifetime Gold; Flying Blue Life Platinum; LH Sen.; Hilton Diamond; Kemal Kebabs Prized Customer
Posts: 58,402
The App doesn't work for me, but the full website version appears to be working for me under my login.
corporate-wage-slave is offline  
Old Oct 26, 22, 7:29 am
  #60  
 
Join Date: Jan 2011
Location: ORD
Programs: AA, United, British Airways, Alaska Air
Posts: 242
Just got an email from IDShield and apparently I'm also affected by this. Ugh.
EtoileFilante is offline  

Thread Tools
Search this Thread