pcmag.comWe review products independently, but we may earn affiliate commissions from buying links on this page. Terms of use. Air Canada on Tuesday disclosed a data breach that exposed the personal information of around 20,000 of its mobile app users. "We recently detected unusual login behavior with Air Canada's mobile app between Aug. 22-24, 2018," the company wrote in a notice to customers. "We immediately took action to block these attempts and implemented additional protocols to block further repeated unauthorized attempts." The company said about 1 percent of the 1.7 million Air Canada mobile app user profiles—or 20,000 in total—"may potentially have been improperly accessed." The breach exposed users' names, email addresses, phone numbers, and any other information they have added to their profiles. That could include a user's passport number, passport expiration date, passport country of issuance and country of residence, Aeroplan number, NEXUS number, Known Traveler Number, gender, birthdate, and nationality. The company said credit card information is protected. "Credit cards that are saved to your profile are encrypted and stored in compliance with security standards set by the payment card industry or PCI standards," the notice reads. Air Canada is now notifying all potentially affected individuals via email. "If you did not receive an email from Air Canada specifically advising you that your Air Canada mobile App account may have been improperly accessed, we are confident your account was unaffected during this period," the company wrote. As a precaution, however, the company has locked all Air Canada mobile app accounts. All 1.7 million users will need to change their passwords "using improved password guidelines" to access their accounts. "It is important to select a robust password as per our instructions when you reset your account," the company advised. "We recommend customers regularly review their financial transactions, be aware of any changes in their credit rating, and contact their financial services provider immediately if they become aware of any unusual or unauthorized transactions."

weiterlesen: RSS Quelle öffnen