KLM and Air France have reported a data breach involving unauthorised access to customer data on an external customer service platform. The incident did not affect the airlines’ internal systems, and no sensitive information (such as passwords, travel details, passport numbers, Flying Blue miles, or credit card data) was compromised.
The breach is linked to a broader wave of similar attacks affecting multiple companies. Immediate security measures were taken to stop access and prevent future incidents. KLM and Air France have notified their respective national data protection authorities (Netherlands’ AP and France’s CNIL).
Customers whose data may have been accessed are being contacted directly and advised to stay alert for suspicious emails or phone calls.