Jin Air data breach exposes 1,454 members via internal API

A hacking attack on an internal API used to view member information leaked data on 1,454 Jin Air customers. Exposed data includes IDs, names, birthdates, gender, nationality, phone numbers, emails and last login times; passwords and payment data were not affected.

• Breach affected 1,454 Jin Air members
• Internal member-info API was the attack route
• Passwords and payment data were not exposed
• Airline blocked the attacking IP and notified the regulator