The group behind the hack of fast-fashion retailer Asos have claimed responsibility for a data breach of airline group Air France-KLM, City AM can reveal.
The individuals who claimed responsibility for the Asos data breach, who call themselves Xuanye Group, last week circulated data which they claimed was obtained from the airline group.
Air France-KLM confirmed to City AM that it recently detected a data breach. A spokesperson for the airline said: “The Air France-KLM Group continuously monitors all applications and data it uses for both its customers and employees.
“Although protected by mandatory multi-factor authentication (MFA) , the group’s IT teams recently detected unauthorised access to internal folders that did at this stage, not contain any sensitive data.
“This incident does not affect customers, service continuity, or the interfaces between Air France-KLM’s information systems and those of its partners and suppliers.
“The IT departments immediately secured the affected folders and files and notified the relevant authorities of these attempted accesses.”
On messaging app Telegram, Xuanye Group posted a screenshot of a number of files relating to Air France-KLM, which appeared to be owned by a number of former and current employees of the airline group.
Xuanye Group told City AM that the files relate to Air France-KLM.
Air France-KLM is listed on the Euronext stock exchange in Paris and Amsterdam. The group was formed in a merger of the two flag carriers in 2004.
Air France-KLM was the subject of a cyberattack in August last year, when another hacker group named ShinyHunters gained access to a third-party customer service platform used by the airline’s contact centers.
Hackers tricked Asos employee
Xuanye Group claimed responsibility for the Asos data breach last week, in which a notification was published from the e-commerce firm’s mobile app, threatening a leak of customer data.
The notification read: “Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it,” and included a link to the Telegram channel where the Air France-KLM data was later shared.
On the social messaging app, the group said it had obtained customer information which is “safe” on their server and “will not be touched for a designated period”.
Asos said last week that the hackers gained access to the company’s platforms by posing as a “trusted contact” and tricking an employee into giving them their login details.
The company said it immediately locked down its platforms to prevent further activity and has referred the incident to “the relevant law enforcement and regulatory authorities”.
Claims are circulating online that ShinyHunters last week hacked into fast fashion retailer H&M, the Times has reported, though the Swedish company said it has not detected a breach.
A spokesperson for H&M said: “We are aware of information circulating online regarding a potential cyber security incident and are currently investigating the claims. To date, we have not found any indications that our IT environment has been compromised.”