Air France-KLM

Summary

Air France and KLM disclosed that a security incident compromised customer personal data. The airlines informed affected individuals about the breach and outlined immediate steps taken to protect information. They also noted ongoing cooperation with authorities to investigate the incident and enhance further security measures.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On September 1, 2025, Air France and KLM issued public disclosures regarding data breaches that affected their customers. The announcements were made simultaneously through separate channels, with Air France releasing a statement in English and KLM publishing a notice in Dutch. Both companies indicated that the incidents involved unauthorized access to personal data belonging to customers. The disclosures followed internal investigations that confirmed the breach had occurred prior to the public announcement. No further technical details about the attack vector or compromised systems were provided in the initial statements.

Air France stated that the breach impacted customers whose personal information may have been exposed, though it did not specify the number of individuals affected. KLM’s notice explicitly informed customers that the incident concerned persoonsgegevens, which translates to personal data, and advised them to remain vigilant. In response to the disclosures, both airlines began notifying affected individuals directly via email or other secure communication channels. The companies also indicated that they had taken steps to contain the breach and to strengthen security measures to prevent similar incidents. As of the date of the disclosures, Air France and KLM were cooperating with relevant data protection authorities and continuing to monitor the situation for any additional developments.

Sources

Sources available to members: 2 sources.