Cathay Pacific, which is under fire for the world’s biggest airline data breach, said the sophisticated attacks lasted months as it took steps to shield its exposed computer network. The attacks were most intense March through May and continued, Asia’s biggest airline said Monday in a written submission to Hong Kong’s legislature before a panel hearing this week. Although the number of successful attacks diminished, concerns remain “new attacks could be mounted,” the city-based airline said, apologizing to passengers for the incident. “Cathay is cognizant that changes in the cybersecurity threat landscape continue to evolve at pace as the sophistication of the attackers improves,” it said. “Our plans, which include growing our team of IT security specialists, will necessarily evolve in response to this challenging environment.” Hong Kong’s privacy watchdog said last week that it was investigating the breach the carrier disclosed seven months after detection. While the attack exposed personal information of 9.4m passengers, including passport details, addresses and emails, Cathay Pacific said flight safety wasn’t compromised and there was no evidence the data was misused. The carrier said it has spent more than HK$1b (US$128m) on its IT infrastructure and security over the past three years. <br/>
oneworld
An American Airlines flight attendant who says she was dragged down the aisle by her scarf by a fellow crew member has sued the Dallas-based carrier for failing to investigate the July 2016 brawl or take actions to ensure her safety. In her lawsuit, filed Friday in federal court, Kathy Ida Wolfe says another flight attendant, Laura Powers, "maliciously dug her fingernails into my arm, and slammed the door of a beverage cart on my arm" and later "grabbed my scarf, choking me, and dragged me in the aisle and in front of the passengers." Wolfe, who resides in Irving, Texas, says she followed the proper procedure, reporting the altercation to the flight's captain, other crew members and the flight services manager. When no one at the airline took action, she says she reported the assault and battery to legal authorities. She alleges American was negligent and created a dangerous work environment, thereby breaching her contract. She is seeking $1m in damages.<br/>