Pegasus Airlines Data Breach
In early 2022, a severe cloud storage misconfiguration was discovered in an Amazon AWS S3 bucket belonging to Turkey-based carrier Pegasus Airlines, specifically utilized by its Electronic Flight Bag (PegasusEFB) software.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
6- Crew names and surnames
- Pilot and flight crew rosters
- Flight crew photos and signatures
- Flight operational documents
- Flight safety logs
- Employee personal details
About This Breach
The unprotected repository contained approximately 6.5 terabytes of data across nearly 23 million files, exposing flight charts, navigation data, aircraft maintenance records, and sensitive personal information belonging to flight crews and pilots, including photos, signatures, and duty schedules.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
