Breach at Indian airline SpiceJet affects 1.2m passengers

SpiceJet suffered a data breach involving the details of more than a million of its passengers, a security researcher says. The security researcher, who described their actions as “ethical hacking”, gained access to one of SpiceJet’s systems by brute-forcing the system’s easily guessable password. An unencrypted database backup file on that system contained private information of more than 1.2m passengers of the carrier last month. Each record included details such as name of the passenger, their phone number, email address and their date of birth, the researcher said. The researcher alerted SpiceJet about the database, but said they never received a meaningful response. The researcher later alerted CERT-In, a govt-run agency in India that handles cybersecurity threats in the nation. <br/>