Air Canada reports data breach, employee data affected

ID theft
Image credit: Pixabay (Image credit: Future)

Air Canada has suffered a cyberattack in which some employee information was accessed. 

The news was confirmed by the airline itself, via a press release published on the company’s website, where a statement revealed, "an unauthorized group briefly obtained limited access to an internal Air Canada system related to limited personal information of some employees and certain records." 

The airline’s operations continued as usual, as both internal and external systems were not affected by the incident, the company confirmed. Customer information was also not tampered with. 

Missing details

"We have since implemented further enhancements to our security measures, including with the help of leading global cyber security experts, to prevent such incidents in the future as part of our ongoing commitment to maintaining the security of the data we hold," the company added.

The police and other relevant organizations have been notified, the announcement concludes. 

Other than this, Air Canada did not disclose further details, meaning there are quite a few unanswered questions. For example, we don’t know who the threat actors behind the incident were, or what they were actually after. We don’t know how they managed to infiltrate Air Canada’s systems, was this a successful phishing attack, or a zero-day vulnerability abused through malware. Finally, we don’t know if this was a ransomware attack, although, given the fact that the company’s systems remained operational throughout the incident, it’s unlikely. 

We do know that this is not Air Canada’s first rodeo. In 2018, BleepingComputer reminds, profile information of 20,000 mobile app users was accessed, forcing the company to lock out 1.7 million mobile app accounts until the issue was resolved. 

Via BleepingComputer

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
The International Civil Aviation Organization in Montreal, Canada
International Civil Aviation Organization investigating possible records data breach
Zero-day attack
Japan Airlines cyberattack disrupts flights, but systems now seem to be back to normal
How to prevent cyberattacks
NTT admits hackers accessed details of almost 18,000 corporate customers in cyberattack
Password
Millions of airline customers possibly affected by OAuth security flaw
A digital themed isometric showing a neon padlock in the foreground, and a technological diagram of a processor logic board in the background.
Major breach hits employee screening firm - 3.3 million affected as hackers steal DISA data
Representational image of data security
Travel data of almost 500,000 users exposed in Daytrip leak
Latest in Security
Data leak
Top home hardware firm data leak could see millions of customers affected
Representational image depecting cybersecurity protection
Third-party security issues could be the biggest threat facing your business
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Android Logo
Devious new Android malware uses a Microsoft tool to avoid being spotted
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Latest in News
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
EA Sports F1 25 promotional image featuring drivers Oscar Piastri, Carlos Sainz and Oliver Bearman.
F1 25 has been officially announced, with this year's entry marking a return for Braking Point and a 'significant overhaul' for My Team mode
Garmin clippd integration
Garmin's golf watches just got a big software integration upgrade to help you improve your game
Robert Downey Jr reveals himself as Doctor Doom to a delighted crowd at San Diego Comic-Con 2024
Marvel is currently revealing the full cast for Avengers: Doomsday, and I think it's going to be a long-winded announcement
Samsung QN90F on yellow background
Samsung announces US prices for its 2025 mini-LED TV lineup, and it’s good and bad news
Nintendo Switch Lite
Forget the Nintendo Switch 2, the original Switch is getting one last hurrah in a surprise Nintendo Direct tomorrow