Pegasus, one of Turkey’s largest airlines, is today a member of the Dutch Data Protection Authority. in a data breach notification found it. The company, which recently came forward with allegations of data breaches in the media, issued a statement confirming the claims and shared details of the breach and the individuals affected.

According to the statement from Pegasus, the data breach has been identified with the aim of making flight plans for the flight crews and ensuring the necessary coordination. because the service’s browser listing feature is enabled took place. As a result of the breach, the personal data of the crew members has been confiscated.

The data breach was discovered on May 31 in response to the news:

According to the announcement, the system vulnerability that caused the data breach was discovered on March 21, 2022. It was shared that the “Listen browser (browser entry)” feature was disabled on March 24, and the vulnerability was fixed. The data breach was discovered on May 31, 2022.It was shared that self-introductory texts were published on social media accounts and some websites by people who had unauthorized access to the topic.

Communicate with third parties who provide unauthorized access to data when sharing it, and immediate destruction of data is requested. announced. While the number of people affected by the data breach is not disclosed and it is said that investigations are still ongoing, the captured data of the flight crew members affected by the data breach was shared as follows:

• Name and surname information,
• phone number
• E-mail address
• title
• Flight information they made in the past
• Photos and signature images of some employees