Solaseed Air announced that personal information was leaked after an external email delivery service it uses was subject to unauthorized access by a third party.
Approximately 490,000 email addresses were leaked. The airline said that no other personal information, such as names, addresses, telephone numbers, or credit card details, was compromised.
On October 28, the company received a report from its contractor that some servers of the email delivery service had been subject to unauthorized access and that some personal information had been leaked externally. On October 30, it received a report that no information leak had occurred, and the email service was temporarily restored. However, on October 31, it received a report that the scope of servers found to have been accessed without authorization had expanded. On November 2, it received a report that email addresses may have been taken outside the company, and on November 4, it identified the number of people who may have been affected.
