Delta Air Lines has filed a lawsuit against a vendor that provided a chatbot service on its website.
The chatbot run by firm [24]7.ai Inc suffered a data breach in 2017.
The airline accused it of lax security protocols and failing to inform them of the breach for five months.
According to the Wall St Journal, the suit says there was no multifactor authentication for employees accessing source code and workers were able to use shared login credentials.
Hackers were able to access the system via compromised login details and then changed the source code of the chatbot to capture guest information.
Card details and other personal information of up to 825,000 customers were compromised.
"This has been an ongoing issue between the companies and nothing new has arisen, except that Delta has chosen to litigate this matter," said [24]7 senior vice president William Bose.
Delta has not yet commented on the status of the lawsuit.
