HackingTransportation & LogisticsTransportationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Cathay Pacific Airways Limited

bd_5df1ab39224bdd5b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 13, 2018

Filed

Oct 25, 2018

To disclose

32 weeks

Affected

7state residents only

Confidence

67%

Full breach record for Cathay Pacific Airways Limited →

Cathay Pacific Airways Limited notified the NH AG of a security incident where unauthorized access to passenger data occurred. Suspicious activity was detected on March 13, 2018. Data accessed included names, DOB, passport numbers, and contact info. 7 NH residents were identified. Experian identity monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 32 weeks / 226 days

Mar 13, 2018

Discovered

Oct 25, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7 affectedView incident

Name: Norton Rose Fulbright US LLP
norm: norton rose fulbright us

Name: Cathay Pacific Airways Limited
norm: cathay pacific airways
Domain: cathaypacific.com
Industry: Transportation & Logisticsllm

Discovered: Mar 13, 2018
Materiality determined: —
Notification sent: Oct 25, 2018
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified the Office of the New Hampshire Attorney GeneralNotified the Hong Kong Police

During the incident: Took immediate action to contain the event
Commence an internal investigation with the assistance of Mandiant
Notified the Hong Kong Police
Notified the individuals it was able to identify
Set up a dedicated website at infosecurity.cathaypacific.com
Issued a press release to the media
Engaged Experian to provide identity monitoring services
Changes made: Enhanced the security and monitoring of its environment
Working with the forensic investigation firm referenced above, as well as other cybersecurity experts, to implement measures to prevent future unauthorized access to its systems and databases
Further enhance its IT security generally
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(226 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cathay-pacific-20181025.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 25, 2018
Raw hash: 741fe5aa08a233b7d85befc64711f8a067e0e4a96d10101fa28956a461304470

Reporting entityNorton Rose Fulbright US LLP

Victim entityCathay Pacific Airways Limited

Incidentdiscovered Mar 13, 2018

Stated responseTook immediate action to contain the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov