Data leak is still a risk!
- CRAC Learning
- Jun 1, 2023
- 1 min read
Latvia’s flag carrier has acknowledged that a ‘technical error’ exposed reservation details of some of its passengers to other airBaltic passengers. Passengers also reported receiving unexpected emails which addressed them by the name of another customer12. The incident happened on May 15th, 2023.
What is Data Leak?
A data leak is an exposure of sensitive data, either electronically or physically, that could occur internally or via physical devices. Data leaks could lead to data breaches, which are entirely caused by cybercriminals. Data leakage threats usually occur via the web and email, but can also occur via mobile data storage devices such as optical media, USB keys, and laptops. Data leaks could happen because of poor security practices or inaction that allows vulnerabilities to take place
Impact
The security impact of this event is that the exposed information could be used for phishing attacks and identity theft
Recommendation
If you are an airBaltic passenger and you received an unexpected email which addressed you by the name of another customer, you should contact airBaltic immediately and change your password.
General recommendation to protect against phishing can be read here - https://www.linkedin.com/feed/update/urn:li:activity:7021417984199995392
References
Comments