Source:
https://scmp.com/news/world/united-states-canada/article/2140535/hundreds-thousands-delta-customers-had-their-data
World/ United States & Canada

Hundreds of thousands of Delta customers had their data exposed during a major cyber attack

The incident is the result of malware found on software belonging to webchat provider [24]7.ai

A Delta Air Lines counter. Photo: AP/Branden Camp

By Benjamin Zhang

Delta Air Lines confirmed that payment information belonging to its customers may have been compromised after a cyber attack on a third-party chat service used by the airline.

According to Delta, “several hundred thousand” customers may have had their names, addresses, and payment card information exposed.

On March 28, Delta was notified by chat service provider [24]7.ai that it malware was present in its software between September 26 and October 17, 2017. In a statement, Delta says it has “engaged federal law enforcement and forensic teams, and have confirmed that the incident was resolved by [24]7.ai last October.”

“At this point, even though only a small subset of our customers would have been exposed, we cannot say definitively whether any of our customers’ information was actually accessed or subsequently compromised,” the airline’s statement went on to say.

Photo: Delta
Photo: Delta

Delta also clarified that the FlyDelta app and mobile Delta.com have not been affected by the breach.

According to Delta, no additional data such as passport, government ID, and Skymiles information have been compromised.

“Should customers’ payment cards be found to have been used fraudulently as a result of the [24]7.ai cyber incident, we will ensure our customers are not responsible for that activity,” Delta said.

The airline is also offering affected customers free credit monitoring services.