Airline now recommending all users to reset their passwords

Aug 30, 2018 07:41 GMT  ·  By

Air Canada announced earlier this week that it discovered unusual activity on its mobile app between August 22 and August 24, with an investigation revealing that some 20,000 user profiles may have been accessed by hackers.

The airline says there are 1.7 million accounts on its mobile app and despite contacting affected users directly, it recommends everyone to reset their passwords.

“We immediately took action to block these attempts and implemented additional protocols to block further repeated unauthorized attempts. As an additional security precaution, we have locked all Air Canada mobile App accounts to protect our customers’ data,” it says.

While credit card information is secure and hasn’t been accessed, exposed details include Aeroplan number, Passport number, NEXUS number, Known Traveler Number, gender, birth date, nationality, passport expiration date, passport country of issuance and country of residence.

Passport info exposed to hackers

Accounts created on aircanada.com weren’t exposed, the company says, adding that customers should monitor bank statements for fraudulent activity and if any, to contact the bank.

“As a best practice, customers should always monitor their transactions and credit rating carefully and contact their financial services provider immediately if they become aware of any unusual or unauthorized activities,” it says.

No details have been provided on how the actual attack happened, and Air Canada explains that despite passport information being exposed, the possibly stolen details aren’t enough to issue new documents, according to government regulations.

“If you stored your passport information on your profile, the Government of Canada’s passport website advises that the risk of a third party obtaining a passport in your name is low if you still have your passport, proof of citizenship and supporting identity documents. Also, according to the website, the Government of Canada cannot issue a new passport to anyone based on only the information found in a passport,” the airline explains.

Air Canada customers who are locked out of the app and cannot access their accounts or have more information on the breach can contact the airline directly at 1- 855-541-0738.