Delta: Data of 'several hundred thousand' customers exposed - WFMJ.com News weather sports for Youngstown-Warren Ohio

Delta: Data of 'several hundred thousand' customers exposed

Posted: Updated:

By DAVID KOENIG
AP Airlines Writer

Delta now says that payment-card information for about "several hundred thousand" airline customers may have been exposed by a malware breach last fall that also hit Sears and other companies.

The airline says that the malware attack may have exposed customers' names, addresses, credit card numbers, card security codes and expiration dates.

Delta Air Lines Inc. offered the additional details about the attack on Thursday, a day after saying that only a "small subset" of customers was affected.

The Atlanta-based airline said that it wasn't sure whether customers' information was actually compromised by malware that it believes was in software used by (24)7.ai, which provided the airline with online chat services for customers, for about two weeks. The software company said it discovered and fixed the breach in October.

Sears said in a statement that it believes the malware led to "unauthorized access to less than 100,000 of our customers' credit card information."

Sears Holdings Corp., which also operates Kmart stores, said it learned of the problem in mid-March and immediately notified credit-card companies to prevent potential fraud. Both Delta and Sears said they worked with federal law enforcement officials and IT-security experts.

It does not appear that the companies' systems were hacked, said Bill Curtis, chief scientist at CAST, a software-security firm. Rather, the malware targeted customers as they made online purchases using infected software.

Consumers "downloaded something that was watching your screen and waiting for the credit cards to float," Curtis said. "They stole the data as you entered it."

A spokesman for (24)7.ai, which is based in San Jose, California, did not immediately respond to a request for comment.

Curtis said (24)7.ai "has a huge liability here." He said companies that use outside technology providers also must take steps to check the security of the software used by those providers.

A Delta spokesman declined to discuss steps the airline took to ensure the security of the (24)7.ai software. Sears, which is based in Hoffman Estates, Illinois, did not respond immediately to a request for comment.

___

David Koenig can be reached at http://twitter.com/airlinewriter

Copyright 2018 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

  • More NewsMore>>

  • Cost of governor's race topped $64M, shy of state record

    Cost of governor's race topped $64M, shy of state record

    Monday, December 10 2018 1:27 PM EST2018-12-10 18:27:13 GMT

    Spending in Pennsylvania's gubernatorial race topped $64 million, as Democratic Gov. Tom Wolf thumped Republican Scott Wagner to win a second term.

    More >>

    Spending in Pennsylvania's gubernatorial race topped $64 million, as Democratic Gov. Tom Wolf thumped Republican Scott Wagner to win a second term.

    More >>
  • Body found on dormitory roof at University of Pittsburgh

    Body found on dormitory roof at University of Pittsburgh

    Saturday, December 15 2018 9:00 PM EST2018-12-16 02:00:34 GMT

    Police say a body has been found on the roof of a residence hall at the University of Pittsburgh.     

    More >>

    Police say a body has been found on the roof of a residence hall at the University of Pittsburgh.     

    More >>
  • Youngstown Fire Station 15 closed today

    Youngstown Fire Station 15 closed today

    Saturday, December 15 2018 3:59 PM EST2018-12-15 20:59:44 GMT
    Youngstown Fire Station # 15Youngstown Fire Station # 15

    Youngstown Fire Station 15 is closed today due to injuries and sick call offs. According to Battalion Chief Charlie Smith, the city will not allow the station to call anyone else due to a city overtime policy.  Battalion Chief Smith says that response time may increase due to the closure.

    More >>

    Youngstown Fire Station 15 is closed today due to injuries and sick call offs. According to Battalion Chief Charlie Smith, the city will not allow the station to call anyone else due to a city overtime policy.  Battalion Chief Smith says that response time may increase due to the closure.

    More >>
Powered by Frankly
All content © Copyright 2000 - 2018 WFMJ. All Rights Reserved. For more information on this site, please read our Privacy Policy and Terms