Dutch airline KLM has confirmed a cybersecurity breach linked to a third-party customer service software provider, potentially exposing personal data of passengers who contacted the airline’s customer service. While sensitive information such as credit card details and passports remains secure, compromised data may include names, contact details, frequent flyer numbers, and email subject lines. The airline is particularly concerned about phishing attacks, where criminals use stolen information to send fraudulent emails resembling official KLM communications. Passengers are advised to verify the authenticity of unexpected messages or calls. KLM has reported the breach to the Dutch Data Protection Authority and implemented additional cybersecurity measures. This incident underscores the aviation industry’s vulnerability to cyberattacks through third-party vendors, prompting airlines to reassess vendor access and data handling practices to enhance security.

