Skip to content
WorldBrand.AI

SITA controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile2 entries

  1. 2021

    Air India discloses passenger data breach linked to SITA incident

    Issue disclosure

    Air India disclosed that personal data of about 4.5 million passengers had been compromised following an incident at SITA, its data processor. Air India said the compromised information included names, payment-card details and passport information. The article also reports that Air India investigated the incident, secured compromised servers, engaged external specialists, notified card issuers and reset frequent-flyer passwords.

    Company response

    • Investigation — Air India

      it had investigated the security incident

    • Remediation — Air India

      secured the compromised servers

    • Ongoing disclosure — Air India

      notified the credit card issuers

    • Remediation — Air India

      had reset passwords of its frequent flyer program

    Source excerpt

    • The stolen information included passengers’ names, credit card details, date of birth, contact information, passport information, ticket information, Star Alliance and Air India frequent flyer data, Air India said in a statement (PDF).
    • Air India said this week that personal data of about 4.5 million passengers had been compromised following the incident at SITA, Indian flag carrier airline’s data processor.
    • The struggling Indian airline, which has been surviving on taxpayer money, claimed that it had investigated the security incident, secured the compromised servers, engaged with unnamed external specialists, notified the credit card issuers, and had reset passwords of its frequent flyer program.
    Source

  2. 2021

    SITA discloses cyberattack affecting airline passenger data

    Issue disclosure

    SITA said a cyberattack affected certain passenger data stored on servers of SITA Passenger Service System (PSS) Inc. The article reports that several airlines confirmed they were affected, including Singapore Airlines, whose roughly 580,000 KrisFlyer and PPS members were affected.

    Company response

    • Investigation — SITA

      The matter remains under continued investigation by SITA’s Security Incident Response Team with the support of leading external experts in cyber-security.

    • Remediation — SITA

      SITA acted swiftly and initiated targeted containment measures.

    Source excerpt

    • Singapore Airlines said roughly 580,000 members of its KrisFlyer and PPS programs are affected by the breach at SITA.
    • Several airlines have confirmed being affected by the breach, including Singapore Airlines, Malaysia Airlines, Finland’s Finnair, Jeju Air in South Korean, and Air New Zealand.
    • SITA said on Thursday that the attack, which it described as “highly sophisticated,” affected certain passenger data stored on servers of SITA Passenger Service System (PSS) Inc., which operates passenger processing systems for airlines.
    Source