Airlines KLM and Air France Detail Customer Data Breach

ShinyHunters May Have Struck Again Mathew J. Schwartz (euroinfosec) • August 7, 2025

European airlines Air France and KLM are in the salvage phase of a data breach incident that has the hallmarks of the cybercrime group that calls itself ShinyHunters, which specializes in gaining access to Salesforce customers' data.

See Also: Why Cyberattackers Love 'Living Off the Land'

The airlines "detected unusual activity on an external platform we use for customer service," they said in a Wednesday breach alert. "Our IT security teams, along with the relevant external party, took immediate action to stop the unauthorized access."

The Air France-KLM Group, headquartered in Paris, operates a fleet comprised of 574 aircraft, and transported 98 million passengers to 320 destinations in 2024. It said hackers didn't reach internal systems, nor stole "sensitive data such as passwords, travel details, Flying Blue miles, passport or credit card information."

The airlines didn't ...