Security News > 2022 > August > India's Newest Airline Akasa Air Found Leaking Passengers' Personal Information

Akasa Air, India's newest commercial airline, exposed the personal data belonging to its customers that the company blamed on a technical configuration error.

The bug was identified on August 7, 2022, the same day the low-cost airline commenced its operations in the country.

"I found an HTTP request which gave my name, email, phone number, gender, etc. in JSON format," Borot said in a write-up.

It has also reported the incident to the Indian Computer Emergency Response Team.

Akasa Air emphasized that no travel-related information or payment details were left accessible and that there is no evidence the glitch was exploited in the wild.

The airline further said it has directly notified affected users of the incident, although the scale of the leak remains unclear, adding it "Advised users to be conscious of possible phishing attempts."

News URL

https://thehackernews.com/2022/08/indias-newest-airline-akasa-air-suffers.html