Data of 580,000 SIA customers leaked in security breach

About 580,000 SIA customers have been affected by a data leak at an external firm. SIA said Thursday that members of its KrisFlyer and PPS Club reward programmes have had their membership numbers, tier status and, in some cases, membership names compromised. It said, though, that the breach did not involve the members' passwords or credit card information. There was also no leak of itineraries, reservations, ticketing information, passport numbers, and e-mail addresses. A spokesman for the airline said: "It is not possible for someone to access any confidential customer data or their miles with only the leaked information." SIA said the data breach originated from air transport information technology firm Sita. The carrier is not a customer of Sita's passenger service system. But all members of the Star Alliance group of airlines, which SIA is part of, provide a set of frequent flier programme data to the alliance. One of the group's 26 member airlines is a Sita customer, which resulted in Sita getting access to the data from the other alliance members. SIA said: "All Star Alliance member airlines provide a restricted set of frequent flier programme data to the alliance, which is then sent on to other member airlines to reside in their respective passenger service systems. This data transfer is necessary to enable verification of the membership tier status, and to accord to member airlines' customers the relevant benefits while travelling."<br/>
Straits Times
https://www.straitstimes.com/singapore/transport/data-of-580000-sia-customers-leaked-in-security-breach
3/5/21
sq;star