Air New Zealand is warning more than 100,000 loyalty members may have their some of their personal data compromised in a cyber-attack.
Two Air New Zealand staff accounts were hijacked in a phishing scam which may have impacted as many as 112,000 customer accounts.
The airline sent an email to customers saying: "While your Airpoints account was not accessed, some information relating to your membership profile may have been visible in our internal documents."
It said Airpoints membership numbers, names and email addresses were possibly captured but said Airpoints passwords and credit card details were safe.
"We’re also focused on further hardening our security processes to help prevent any similar incidents from happening in the future. We would encourage you to be on the lookout for phishing emails," it added.
Some Airpoints members have voiced concerns over the vague language used in the email and criticised the airline’s handling of the breach.
Air NZ has about 3.2 million Airpoints members and says about 3.5% of accounts were possibly impacted.
