Yet Another Massive Data Breach Hits A Major Airline: This Time, Cathay Pacific

They have always been an irresponsible arrogant uncaring company corporate wise
Despite having nice flight attendants a good first class and a respectable business class
Flying out of LA they turned the experience into flying out of a 3rd world country
I’ve actually never seen anything like it in my lifetime
Not surprised at all of their lapses in good judgement

Did not want to scare unnecessarily... They got name, birthday and passport number, that is like handing out your ID to a stranger. Can't get any worse than this. They should be on top of this, immediately notify everyone, provide years of identity theft protection, etc...

just awful. the worst yet by far. 9.4 million peoples' info breached, including 1mm passport numbers! This isn't just email addresses and passwords...in many cases, all 3 of passport number + nationality + DOB were stolen.

And then they sat on their hands 7 months before disclosing. Completely shameful. The worst airline data breach by far and frankly not in the same league as the other ones being talked about.

Simply pathetic of Cathay. It's unforgivable they didn't tell folks for this long, especially given the nature of what was stolen.

The password requirements on some airline frequent flier account logins (Miles and More, Iberia come to mind) are shockingly low - 5 or 6 digit pins, probably hinting at bigger hidden security holes in the IT systems of these programs.

@Dwon Flying in America is a third world experience, what do you expect. Who ever heard of collecting your bags again before you transit domestically, fucking savages.

I saw this coming a mile away with Cathay. That’s what happens when you give a autonomous region control. No oversight. It would never happen at SQ.

I was a victim of the British Airways one too.

Hong Kong's law is very bad when it comes to data breach.
They do very little to protect consumers and almost nothing to punish companies.

Best to setup shady tech startup in Asia. All the greed, none of the responsibility.

James, you’ve missed the most important: the breach was discovered by CX in March, confirmed in May and revealed to public only days ago. Because they “didn’t want to cause panic”.

Have just been told by email 6 items of my personal info we’re exposed in this incident including DOB, passport#, mobile#. CX was telling me am offered a complimentary 12 mth service subscription service with an ID monitoring company, not sure how much I should believe in what they’re telling me given they dragged for almost 6 mths to reveal such disaster. Absolutely pathetic.

Rupert Hogg and his team have deliberately delayed announcing this to the customers effected by 7 months. They have put millions of customers at high financial and security risk without any end point. They are playing down what they did and prentending they are victims. This really isn’t the case. This entire team of management should be terminated immediately. Sadly, the authorities have not taken any strong action against these offenders and they continue to remain irresponsible untouchables, who do as they please. Hope justice prevails!!!