Third-Party Service Exploitation
Air India Data Breach (2021)

Modus Operandi:
- Cyberattack compromised personal data of about 4.5 million customers, including passport and credit card information.
- Attackers targeted Air India’s passenger service system provider, leading to the breach.
Investigation Steps:
- Incident Reporting: Air India disclosed the breach publicly.
- Collaboration: Worked with external specialists to investigate.
- Containment: Secured affected systems to prevent further unauthorized access.
- Notification: Informed affected customers and advised monitoring of financial transactions.
- System Upgrades: Enhanced security protocols to prevent future breaches.