FlightAware Customer Data Left Exposed for Over Three Years


Users of FlightAware, the world’s largest flight-tracking platform, are being prompted to change their login credentials following a reported “data security incident.”

According to FlightAware, the breach may have leaked sensitive customer information. The problem was discovered on 25 July, but it’s possible that it’s been ongoing since January 2021. Company officials say they believe it may have resulted from a “bad configuration,” which has since been fixed.

Read more…
Source: MSN News


Sign up for our Newsletter


Related:

  • British judge rules dissident can sue Saudi Arabia for Pegasus hacking

    August 19, 2022

    A British judge has ruled that a case against the kingdom of Saudi Arabia brought by a dissident satirist who was targeted with spyware can proceed, a decision that has been hailed as precedent-setting and one that could allow other hacking victims in Britain to sue foreign governments who order such attacks. The case against Saudi ...

  • LockBit claims ransomware attack on security giant Entrust

    August 18, 2022

    The LockBit ransomware gang has claimed responsibility for the June cyberattack on digital security giant Entrust. Last month, BleepingComputer broke the story that Entrust suffered a ransomware attack on June 18th, 2022. Starting in early June, Entrust had begun to tell customers that they suffered a cyberattack where data was stolen from internal systems. Read more… Source: Bleeping Computer  

  • Twitter breach exposed anonymous account owners

    August 5, 2022

    A vulnerability in Twitter’s software that exposed an undetermined number of owners of anonymous accounts to potential identity compromise last year was apparently exploited by a malicious actor, the social media company said Friday. It did not confirm a report that data on 5.4 million users was offered for sale online as a result but said ...

  • Hacker selling Twitter account data of 5.4 million users for $30k

    July 22, 2022

    Twitter has suffered a data breach after threat actors used a vulnerability to build a database of phone numbers and email addresses belonging to 5.4 million accounts, with the data now up for sale on a hacker forum for $30,000. Yesterday, a threat actor known as ‘devil’ said on a stolen data market that the database ...

  • Walmart-controlled flight booking service suffers substantial data leak

    July 19, 2022

    An Indian flight booking website majority-owned by US retail colossus Walmart has experienced a data breach, but is saying very little about what happened or the risks to customers. News of the breach emerged on Monday, when customers received a message. While the message to customers assures them that “no sensitive information pertaining to your Cleartrip account” ...

  • 1.9m patient records exposed in healthcare debt collector ransomware attack

    July 13, 2022

    Professional Finance Company, a Colorado-based debt collector whose customers include hundreds of US hospitals, medical clinics, and dental groups, recently disclosed that private data – including names, addresses, social security numbers, and health records – for more than 1.9 million people was exposed during a ransomware infection. In a notice posted on its website, PFC ...