Air Canada admits app security breach could hit thousands of passenger profiles

Air Canada has told users of its mobile application to change their password after it encountered a data breach late last week that may have affected up to 20,000 customers.

The airline said it detected “unusual login behaviour” prompting it to lock all accounts to protect customer data.

In a statement, Air Canada says that credit card information is protected but directs users who stored passport information on the app to the Government’s passport fraud pages.

The airline says information stored on the app includes name, email address and telephone number while additional data that may be stored on the profile includes passport number, gender, nationality and other passport details.

Air Canada says that about 1% of its 1.7 million mobile app user profiles may “potentially have been improperly accessed.”

It adds that it is directly contacting anyone that might have been affected.

Air Canada says it has also issued improved password guides in order to enhance security further.