SHARE
COPY LINK

SAS

IT breach at airline SAS gives passengers access to each other’s payment information

Several customers with Scandinavian airline SAS were late on Tuesday able to see personal information that did not belong to them after a cyberattack which froze the company’s website.

IT breach at airline SAS gives passengers access to each other’s payment information
A cyber security breach at SAS briefly allowed passengers to see each other's customer information. Photo by Ottr Dan on Unsplash

Visible information included customers’ contact information plus the last four numbers of their payment cards.

The issue was confirmed by SAS in an update on Wednesday.

The company stressed that the information is not at risk of being misused.

Customers were also briefly able to view passport details belonging to other customers, however.

SAS did not state whether the perpetrator of the cyberattack is known to the company.

But such attacks often come in clusters, meaning similar issues could occur again in the near future, it said.

The company also said it works closely with police on security issues including the latest cyberattack.

“We are monitoring the situation closely and are continuing the work of analysing and evaluating the consequences of the attack,” the company said.

“In addition, we are working to bring in preventative measures,” it also said.

Several websites in Sweden were targeted in cyberattacks on Tuesday, including the national broadcaster SVT and the Swedish health service.

Hacker group Anonymous Sudan claimed responsibility for these attacks, citing recent burnings of the Quran by far-right activist Rasmus Paludan as its motive.

A link to the attack on SAS is neither confirmed nor unconfirmed.

Member comments

Log in here to leave a comment.
Become a Member to leave a comment.

SAS

Airline SAS fined over Covid rule breach on Copenhagen flight

Scandinavian airline SAS has been hit with a fine of a quarter of a million kroner for failing to comply with Covid-19 regulations in 2021.

Airline SAS fined over Covid rule breach on Copenhagen flight

The company was found guilty at Copenhagen City Court of transporting 35 passengers without valid Covid-19 tests on a flight to Copenhagen Airport in spring 2021.

The passengers were on a flight from Mallorca, where they transferred at Copenhagen Airport before continuing to Stockholm.

SAS had been accused of similar violations involving individual passengers on other services, but was only found guilty in relation to the Mallorca flight.

READ ALSO: EXPLAINED: How SAS’s decision to switch airline alliance will affect travellers

The airline had asked to be acquitted by the court, arguing there were a “long series of strong legal reasons” for this.

The prosecution had asked for a fine of 913,500 including the other cases which were not proven.

On the flight for which SAS was found to have violated Covid-19 travel restrictions which were in force at the time, 35 people flew from Palma Mallorca to Copenhagen, from there they waited for transit to Stockholm. They did not have negative Covid-19 tests taken within a recent enough time frame (under 24 hours was the requirement at the time).

SAS argued that the circumstances surrounding the flight were extraordinary: that the flight change in Copenhagen was only necessary because a direct Palma-Stockholm service had been cancelled.

An internal email presented by the company showed that passport control had approved the passengers’ test status over the phone.

But even if such a message had been given by passport control, it was not valid justification for allowing the passengers to board because it was not in line with the law, the prosecution said during an earlier stage of the trial.

SHOW COMMENTS