Passport Numbers Exposed in Air Canada Data Breach

Air Canada has alerted users of its mobile app of a data breach that exposed personal information – including stored passport numbers – of some 20,000 users.

The airline said after noticing "unusual login behavior" on the Mobile+ app from Aug. 22 to 24, it blocked that traffic and locked all Air Canada mobile app accounts. Customers now must reactivate their accounts on the app, which is back up and running.

"We contacted potentially affected customers directly by email starting Aug. 29 to tell them if we determined their account may potentially have been accessed improperly," Air Canada said on its website. "We are also requiring all Air Canada mobile app users to re-set their passwords using improved password guidelines to further enhance security measures. A more robust password provides an extra layer of protection."

Account-holder names, email addresses, and telephone numbers were exposed in the breach, in addition to passport numbers of those users who stored that information in their profiles. The airline has some 1.7 million mobile app users but said only 1% of the user accounts were accessed by the attackers.

Read more here.