Viva Air Data Breach
In March 2022, unauthorized access was detected within the reservation and loyalty systems of Viva Air (Fast Colombia S.A.S.), a prominent Latin American low-cost carrier.
Exposed Data Types
7- Email addresses
- IP addresses
- Names
- Partial credit card data
- Phone numbers
- Physical addresses
- Purchases
About This Breach
The security incident resulted in the exfiltration of customer records representing approximately 932,232 airline passengers. Exposed data attributes include passenger full names, email addresses, phone numbers, passport and national identity numbers, birth dates, and flight itinerary references (PNR data).
The unauthorized release of statutory travel identity documents alongside flight history significantly heightens the risk of targeted spear-phishing campaigns and fraudulent identity impersonation. Passengers are advised to remain vigilant against unverified communications claiming to originate from airline ticketing desks.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
