Skip to content

What we know about the data breach targeting frequent flyer info

March 05, 2021
3 min read
woman sits on couch while using laptop
What we know about the data breach targeting frequent flyer info
This post contains references to products from one or more of our advertisers. We may receive compensation when you click on links to those products. Terms apply to the offers listed on this page. For an explanation of our Advertising Policy, visit this page.

A “highly sophisticated” cyber attack targeting frequent flyer data has affected at least 11 airlines around the globe, including U.S. carriers American and United. The Feb. 24 incident targeted SITA, a technology provider that helps process communications and passenger information across numerous carriers.

Fortunately for customers, the hackers were not successful in stealing critical information like customer passwords or credit card information, according to both SITA and the affected airlines. Instead, the breach appears to have been limited to data such as frequent flyer account numbers and status levels.

“We recognize that the COVID-19 pandemic has raised concerns about security threats, and, at the same time, cyber-criminals have become more sophisticated and active,” SITA said in a Friday statement acknowledging the incident, which it said “remains under continued investigation.”

Sign up for our daily newsletter

Want more airline-specific news? Sign up for TPG's free new biweekly Aviation newsletter!

“This was a highly sophisticated attack,” the company added.

Affected airlines also have begun reaching out to customers. Despite early reports that the breach may have affected only carriers of the Star Alliance frequent flyer group, other airlines have also been exposed.

In the U.S., both United and American had started emailing customers on Friday afternoon.

“It's our understanding that the only information potentially accessed were customer names, MileagePlus numbers and Star Alliance statuses (Silver or Gold),” United said in an email to its members. "Importantly, no other personal information or passwords were exposed that would allow anyone to access your MileagePlus account.”

American sent out a similar email to customers.

Cyber secure: How to protect yourself against reward program data breaches

Neither are customers of SITA’s passenger service system, though their frequent-flyer information seems to have been exposed via partners that are. The system can, among other things, allow airlines to share tier status information with each other so that airlines can offer elite benefits to eligible customers of their partners.

At least nine other carriers were affected, according to media reports and emails sent by carriers. They include Cathay Pacific, Finnair, Japan Airlines, Jeju Air of Korea, Lufthansa, Malaysia Airlines, SAS and Singapore Airlines. Delta Air Lines told TPG that it had no indication it was exposed to the breach.

Still, Skift estimates that “more than two million travelers enrolled in the frequent flier programs (of the affected) airlines had some of their data hacked.”

While SITA and the airlines say no sensitive information was taken, some carriers suggested customers could change their passwords “out of an abundance of caution.”

Featured image by JOHNER IMAGES/GETTY IMAGES
Editorial disclaimer: Opinions expressed here are the author’s alone, not those of any bank, credit card issuer, airline or hotel chain, and have not been reviewed, approved or otherwise endorsed by any of these entities.

TPG featured card

Best starter travel card
TPG Editor‘s Rating
Card Rating is based on the opinion of TPG‘s editors and is not influenced by the card issuer.
4 / 5
Go to review

Rewards

1 - 3X points
3XEarn 3 Points per $1 spent at Restaurants and Supermarkets
3XEarn 3 Points per $1 spent at Gas Stations, Air Travel and Hotels
1XEarn 1 Point per $1 spent on all other purchases

Intro offer

Earn 80,000 ThankYou® points60,000 points
For a limited time, earn 80,000 bonus ThankYou® Points after you spend $4,000 in purchases within the first 3 months of account opening

Annual Fee

$95

Recommended Credit

670-850
Excellent, Good
Credit ranges are a variation of FICO© Score 8, one of many types of credit scores lenders may use when considering your credit card application.

Why We Chose It

The Citi Premier’s 3 points per dollar spent across a wide range of popular categories is one of the more lucrative offerings in the world of points and miles. The Citi Premier comes with a $95 annual fee and is currently offering a solid sign up bonus of 80,000 points after you spend $4,000 on purchases within the first three months. It also has some valuable transfer partners to make the most of your rewards. Add in access to Citi Entertainment plus a $100 hotel credit for any single-stay hotel booking that exceeds $500 or more, excluding taxes and fees, booked through the Citi travel website, there are few reasons why the Citi Premier should not be in every traveler’s wallet.

Pros

  • Earns 3x points on restaurants, supermarkets, gas stations, air travel and hotels.
  • $100 annual hotel savings benefit (on single hotel stay bookings of $500 or more, excluding taxes and fees, booked through thankyou.com)
  • Points transfer to 16 airline programs, from JetBlue to Virgin Atlantic.
  • World Elite Mastercard benefits, extended warranty, damage and theft protection.

Cons

  • $95 annual fee
  • Lacks travel protections that other travel rewards cards come with
  • For a limited time, earn 80,000 bonus ThankYou® Points after you spend $4,000 in purchases within the first 3 months of account opening
  • Earn 3 Points per $1 spent at Restaurants and Supermarkets
  • Earn 3 Points per $1 spent at Gas Stations, Air Travel and Hotels
  • Earn 1 Point per $1 spent on all other purchases
  • Annual Hotel Savings Benefit
  • 80,000 Points are redeemable for $800 in gift cards when redeemed at thankyou.com
  • No expiration and no limit to the amount of points you can earn with this card
  • No Foreign Transaction Fees on purchases
Best starter travel card
TPG Editor‘s Rating
Card Rating is based on the opinion of TPG‘s editors and is not influenced by the card issuer.
4 / 5
Go to review

Rewards Rate

3XEarn 3 Points per $1 spent at Restaurants and Supermarkets
3XEarn 3 Points per $1 spent at Gas Stations, Air Travel and Hotels
1XEarn 1 Point per $1 spent on all other purchases
  • Intro Offer
    For a limited time, earn 80,000 bonus ThankYou® Points after you spend $4,000 in purchases within the first 3 months of account opening

    Earn 80,000 ThankYou® points
    60,000 points
  • Annual Fee

    $95
  • Recommended Credit
    Credit ranges are a variation of FICO© Score 8, one of many types of credit scores lenders may use when considering your credit card application.

    670-850
    Excellent, Good

Why We Chose It

The Citi Premier’s 3 points per dollar spent across a wide range of popular categories is one of the more lucrative offerings in the world of points and miles. The Citi Premier comes with a $95 annual fee and is currently offering a solid sign up bonus of 80,000 points after you spend $4,000 on purchases within the first three months. It also has some valuable transfer partners to make the most of your rewards. Add in access to Citi Entertainment plus a $100 hotel credit for any single-stay hotel booking that exceeds $500 or more, excluding taxes and fees, booked through the Citi travel website, there are few reasons why the Citi Premier should not be in every traveler’s wallet.

Pros

  • Earns 3x points on restaurants, supermarkets, gas stations, air travel and hotels.
  • $100 annual hotel savings benefit (on single hotel stay bookings of $500 or more, excluding taxes and fees, booked through thankyou.com)
  • Points transfer to 16 airline programs, from JetBlue to Virgin Atlantic.
  • World Elite Mastercard benefits, extended warranty, damage and theft protection.

Cons

  • $95 annual fee
  • Lacks travel protections that other travel rewards cards come with
  • For a limited time, earn 80,000 bonus ThankYou® Points after you spend $4,000 in purchases within the first 3 months of account opening
  • Earn 3 Points per $1 spent at Restaurants and Supermarkets
  • Earn 3 Points per $1 spent at Gas Stations, Air Travel and Hotels
  • Earn 1 Point per $1 spent on all other purchases
  • Annual Hotel Savings Benefit
  • 80,000 Points are redeemable for $800 in gift cards when redeemed at thankyou.com
  • No expiration and no limit to the amount of points you can earn with this card
  • No Foreign Transaction Fees on purchases