words per minute
11
DeepakChitale
00:00
Speed
"The CX case may well result in 'spear phishing,' where stolen details are used to customize phishing emails, to make them far more target-specific and believable," Gazeley said, adding that once personal information hits the dark web it can then be aggregated with other existing leaked data belonging to victims.
According to the airline, a total of 403 expired credit card numbers and 27 credit card numbers with no card verification value were compromised, along with about 860,000 passport numbers and 240,000 Hong Kong ID card numbers.
It said more than half the leaked data included names with phone numbers or email addresses, and there was no evidence that passwords, Asia Miles or Marco Polo Club account information had been illegally accessed.
Cathay has drawn a chorus of criticism for the way it handled the breach. The Hong Kong government also weighed in on Friday, saying it was highly concerned and pressing the airline to cooperate fully with an investigation by the Office of the Privacy Commissioner for Personal Data.