Air India admits to data breach impacting 4.5m customers, sat on the news for five weeks

India’s flag carrier, Air India, has admitted it fell foul of the data breach at aviation information services provider SITA, and that its disclosure comes five weeks after it was notified of the situation. A new statement [PDF] from the airline says that personal data describing around 4.5 million of its customers leaked when …

[A random security guy]

We are going to make a security breach announcement using HTTP as HTTPS .

HTTPS is too difficult/superfluous/e don't know what it is ... pick your excuse. Tried using HTTPS and was bounced back to HTTP.

Just another stupid lowest bid wins organization which can't get its head wrapped around quality.

[Anonymous Coward]

Best subhead evar

[Annihilator]

Came here for this. "While my SITA gently leaks" is just such multi-levelled brilliance.

[Pascal Monett]

You sat on it for 5 weeks

The only right time to reveal that you've a data breach is when you find out.

Eventually, you can take a day or two to ascertain the extent of the breach and what was pilfered.

Every additional day without a word just means two things : you are not competent enough to know what's going on on your network and you don't want anyone to know.

Well I'm sorry, but you were breached. It already doesn't look good, but at least you're hardly the first, so bite the bullet and alert your customers.

Waiting 5 weeks is borderline criminal.

[Missing Semicolon]

It's India's flag-carrier

Don't expect anything to happen.