a cybercriminal group called daishin team leaked sample data belonging to AirAsia, a Malaysian low-cost airline, on a data leak portal.
The development comes just over a week after the company fell victim to ransomware attacks on November 11th and 12th. DataBreaches.net.
The attackers claim to have obtained personal data related to 5 million unique passengers and all their employees.
Samples uploaded to the leak site revealed passenger information, booking IDs, and personal data related to company staff.
A spokesperson for the attacker told DataBreaches.net that no further attacks were carried out due to AirAsia’s inadequate security measures and the “chaotic organization of the network.”
Daixin Team was recently the subject of warning advisories from US cybersecurity and intelligence agencies about attacks primarily targeting the healthcare sector.
Other victims of criminal groups include Fitzgibbon Hospital, Trib Total Media, ista International GmbH and OakBend Medical.
Hacker News has reached out to AirAsia for comment and will update the article when it responds.