Thai Airways Reports Data Breach Affecting 65,029 Passengers
Thai Airways has reported a data breach to Thailand's Personal Data Protection Committee after Amadeus discovered unauthorized access to the booking information of 65,029 passengers. The airline secured the system and is assessing the impact, while the PDPC has ordered a full investigation and a plan to notify and protect affected individuals.
The Office of the Personal Data Protection Committee (PDPC) has disclosed a cyberattack on Thai Airways that may have compromised the personal data of 65,029 passengers who booked tickets. Thai Airways notified the PDPC of the data breach within the required 72 hours after receiving a report from Amadeus that an unauthorized party had accessed passenger booking data through an account. Thai Airways has since cut off access and reset system credentials to close the vulnerability. The airline is currently conducting further inspection and risk assessment to determine notification measures and remediation for affected data owners. The PDPC has ordered Thai Airways to submit an electronic investigation report detailing the root cause, the outcome of notifications and preventive measures for those affected, and the results of a review to upgrade data security measures to prevent recurrence. The PDPC also stated it will continue to monitor and supervise to ensure personal data protection in accordance with the law.
