Indian airline SpiceJet confirms breach of 1.2 million passenger details

SpiceJet, one of India’s largest privately owned airlines, has confirmed a data breach involving the details of over a million of its passengers. The security researcher, who described their actions as "ethical hacking" but whom we are not naming as they likely ran afoul of U.S. computer hacking laws, gained access to one of SpiceJet's systems by brute-forcing the system's easily-guessable password. An unencrypted database backup file on that system contained private information of more than 1.2 million passengers of the budget-carrier last month, TechCrunch has learned.

from Yahoo Tech https://ift.tt/2S0hrS9