Air France and KLM customers may have had personal details exposed following data breach

• Unidentified hackers access Air France and KLM through a third-party service provider
• The attackers stole names, contact details, and more
• Passport data was not compromised

Air France and KLM Royal Dutch Airlines have confirmed recently suffering cyberattacks in which both airlines lost sensitive customer data.

The companies, both owned by the same airline holding firm, sent out data breach notification letters to affected customers, and in a statement shared with Tweakers, KLM said the incident happened when threat actors broke into a third-party service provider.

“Unusual activity was detected on a third-party platform used by our contact centres, which led our IT security team, together with the third-party system involved, to swiftly implement corrective measures to put an end to the incident,” the company also told Cybernews.