Scandinavian Airlines Data Breach
In February 2023, Scandinavian Airlines (SAS) suffered a cyberattack claimed by the Anonymous Sudan hacktivist group.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
7- Passenger names
- Dates of birth
- Email addresses
- Phone numbers
- Flight booking references and itineraries
- Frequent flyer loyalty numbers
- Partial payment card digits
About This Breach
The attack caused technical disruptions and a session caching malfunction in the SAS mobile application, resulting in logged-in passengers inadvertently viewing other travelers' accounts, including full names, contact details, EuroBonus loyalty numbers, flight booking itineraries, and the last four digits of credit cards.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
