Air France, the French flag carrier, has allegedly been compromised by an unauthorized party claiming to have exploited a vulnerability in the airline’s systems. The threat actor is offering to sell access to an administrative panel along with a method for data extraction. The breach reportedly impacts a database containing information on over 2 million individuals, potentially affecting both job candidates and Flying Blue loyalty program members.
According to the actor, the allegedly compromised data includes:
-
Personal Information: Full names (First and Last), dates of birth, genders, and civil status.
-
Contact Details: Email addresses, phone numbers, and countries of residence.
-
Recruitment Data: Profile images, CVs (Resumes), English proficiency levels, interview history, career types, and LinkedIn profiles.
-
Account Details: User IDs, registration dates, last login timestamps, and consent flags.
-
Loyalty Program Data: Flying Blue numbers, status levels (e.g., Explorer, Silver), current tier XP, and miles balances.
