Malindo Air claims a massive data breach revealed last week was an inside job.
It says two former workers of its e-commerce contractor ‘improperly accessed and stole the personal data of our customers.’
The contractor is GoQuo and the two workers were based in their development centre in India.
The data breach came to light after the leaked data was discovered for sale on the dark web.
Cybersecurity firm Kaspersky found data from about 30 million passengers of Malindo Air and sister brand Thai Lion Air were compromised although it did not include any credit card or financial information.
The airline said the data breach has been contained and extra security protocols are being out in place.
It was reported to the police in Malaysia and India as a criminal matter.
