Pachatours Allegedly Breached, With Passport and Payment Data Reportedly Exposed
Summary
Pachatours was allegedly breached via SQL injection. Attackers claimed to extract a roughly 2GB database with more than 2.2 million rows, reportedly including passport, payment, B2B credential, and PNR data.
Key points
- The article reports an alleged breach of French tour operator Pachatours; the claim is not independently confirmed in the supplied content.
- Attackers reportedly used SQL injection through an unprotected web endpoint.
- Attackers claimed to have extracted a database of about 2GB and more than 2.2 million rows.
- The reportedly exposed data includes passports, payment details, B2B credentials, and passenger name records (PNRs).
Article Details
- Victim Organization
- Pachatours
- Incident Type
- Alleged data breach involving SQL injection through an unprotected web endpoint and claimed database extraction.
- Data Types Exposed
- Passport data
- Payment details
- B2B credentials
- Passenger Name Records (PNRs)
- Affected Records
- Attackers claimed to have extracted more than 2.2 million rows.
- Affected Data Size
- Attackers claimed the database was about 2GB.
- Claim Status
- alleged