Nacsa: Alleged AirAsia data breach being investigated

PETALING JAYA: A spokesperson with the National Cyber Security Agency (Nacsa) says it is aware that a hacker group is alleging to have breached AirAsia, saying that the low-cost airline is currently investigating the case.

“Yes, we are aware of this. AirAsia is investigating this and will report to Nacsa,” the spokesperson says.

Nacsa is the government agency overseeing cybersecurity incidents in Malaysia.

Early this morning, the hacker group, which goes by SiegedSecurity, claimed to have stolen 2.2GB worth of data belonging to AirAsia, uploading it online to a file-hosting service.

It made these claims via posts to its Telegram and X (formerly Twitter) accounts at 1.43am, stating that the stolen data included “source code” and “sensitive files”.

Two folders were included in the upload to the file-hosting service, with 174 files in total.

The uploaded data comprised compressed files in jar, zip, and tgz file formats, along with what appear to be databases containing the names of the airline’s suppliers, their email addresses, supplier ID numbers, account statements, and banking details, among other things.

LifestyleTech has also reached out to AirAsia for a statement regarding the alleged incident.