Vietnam Airlines Data Breach
haveibeenpwned.com
Vietnam Airlines Data Breach
1–10 of 39 posts
Re: Vietnam Airlines Data Breach
#2Haven't heard a word from Vietnam Airlines - my whole family are members. Interesting to see how a Vietnamese organisation handles this type of incident.
Re: Vietnam Airlines Data Breach
#3Trying to understand what's the real damage here. Dates of birth, Email addresses, Loyalty program details, Names, Phone numbers - how is one going to use this data to cause a loss the data owner? If any security check depends on this data by considering it as a secret, then I guess it's the fault of that security check.
Re: Vietnam Airlines Data Breach
#4Trying to understand what's the real damage here. Dates of birth, Email addresses, Loyalty program details, Names, Phone numbers - how is one going to use this data to cause a loss the data owner? If any security check depends on this data by considering it as a secret, then I guess it's the fault of that security check.
Re: Vietnam Airlines Data Breach
#5at this point one should just assume all their data is already public once they entered it to any platform...
Re: Vietnam Airlines Data Breach
#6Trying to understand what's the real damage here. Dates of birth, Email addresses, Loyalty program details, Names, Phone numbers - how is one going to use this data to cause a loss the data owner? If any security check depends on this data by considering it as a secret, then I guess it's the fault of that security check.
https://security.stackexchange.com/a/95070 https://en.wikipedia.org/wiki/Phishing#Spear_phishing
[deleted]
Re: Vietnam Airlines Data Breach
#7Can't think of an airline I'd be less surprised to hear this about.
Vietnam Airlines once somehow managed to email me the boarding pass of another person due to fly with them the following day. I'd provided an email address to their sales agent when booking a flight on a different route some nine years earlier (back in the good old days of 2009 when they didn't have newfangled stuff like online booking), and didn't even have a remotely similar name to the individual whose boarding pass they'd sent me. I hope they didn't miss their flight! (yes, I emailed back, copying in some customer service addresses that definitely weren't no-reply...)
I'm not an expert in airline PSS systems, but I know one thing - that isn't supposed to happen :)
Re: Vietnam Airlines Data Breach
#8Trying to understand what's the real damage here. Dates of birth, Email addresses, Loyalty program details, Names, Phone numbers - how is one going to use this data to cause a loss the data owner? If any security check depends on this data by considering it as a secret, then I guess it's the fault of that security check.
https://security.stackexchange.com/a/95070 https://en.wikipedia.org/wiki/Phishing#Spear_phishing
As I mentioned, the real issue is around considering of this data as a secret.
Re: Vietnam Airlines Data Breach
#9[deleted]
Re: Vietnam Airlines Data Breach
#10Trying to understand what's the real damage here. Dates of birth, Email addresses, Loyalty program details, Names, Phone numbers - how is one going to use this data to cause a loss the data owner? If any security check depends on this data by considering it as a secret, then I guess it's the fault of that security check.
It's inherently a loss of privacy that anyone (given that the dataset is now public) can correlate
> Dates of birth, Email addresses, Loyalty program details, Names, Phone numbers