AirAsia Passenger Data Leak Incident – Government's Preliminary Investigation Finds AirAsia System Attacked by Malware

 

The Ministry of Communications and Digital is now sharing preliminary findings related to the investigation involving a recent report, saying there was a leak of personal data of five million AirAsia passengers and staff.

It is said that this incident was the result of hacking by a hacking group known as Daixin.

Further to that, the government consisting of the Personal Data Protection Department (JPDP) and CyberSecurity Malaysia have started an investigation by holding discussions with the management of Capital A.

It was found that a cyber attack on AirAsia's server system occurred on 12 November 2022, resulting from unauthorized access, resulting in a ransomware attack, potentially leading to data leakage.

Further investigations are still underway, in understanding the cause of the invasion and also the overall impact of the incident.