Tigerair Taiwan Data Breach
The 2022 Tigerair Taiwan data breach occurred in June 2022 when passenger and frequent flyer databases belonging to Tigerair Taiwan (tigerairtw.com), Taiwan's primary low-cost carrier, were compromised and leaked online.
Exposed Data Types
7- Email addresses
- Names
- Dates of birth
- Genders
- Passport numbers
- Passwords
- Credit cards
About This Breach
What information was compromised in the Tigerair Taiwan incident?
The leaked archive dump contains over 1.1 million passenger records and booking transaction logs. Verified data classes include:
- Personal & Passport Identifiers: Passenger full names, birth dates, genders, international passport numbers, and passport expiration dates.
- Contact Credentials: Registered member and passenger email addresses and contact phone numbers.
- Security Credentials: Password hashes secured using Base64-encoded SHA-256 algorithms.
- Financial Details: Exposed credit card account numbers and transaction timestamps.
How many accounts were affected?
Standardized RFC 5322 ASCII canonical verification confirmed 719,086 unique valid email addresses across 1,180,582 passenger records.
Security advisory & personal identity protection
The compromise of government passport numbers and payment card records creates severe vulnerabilities to financial fraud, credit card exploitation, and targeted airline refund smishing. Impacted travelers should:
- Immediately monitor payment card statements for unauthorized or fraudulent charges.
- Exercise heightened vigilance regarding unsolicited messages citing flight delays or booking modifications.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information