[Aug 30, 2018]
Air Canada issued a security notice for Air Canada Mobile App users as they detected unauthorized access to the mobile App between Aug 22-24, 2018.
It appears more than 20,000 user accounts have been accessed without proper authorization.
The attacker can extract the data stored in the Air Canada mobile App that includes name, email address, and telephone number. Also, the additional data such as Aeroplan number, Passport number, NEXUS number, Known Traveler Number, gender, birthdate, nationality, passport expiration date, passport country of issuance and country of residence.
Air Canada confirm that the payment card details are encrypted and stored as per the security standards set by the payment card industry or PCI standards.
Cyber Security Tips:
If your account is affected then you will be receiving an email from Air Canada with instructions required to reactivate your Air Canada mobile App account.