Delta Airlines is reportedly the latest major company to have a security breach. The airline is investigating the company, [24]7.ai, regarding a breach of customer payment information. [24]7.ai provides online chat communication for Delta as well as other businesses.
Delta released a statement shortly after learning of the breach March 28th.
“It is our understanding that the incident occurred at from Sept. 26 to Oct. 12, 2017, and that during this time certain customer payment information for [24]7.ai clients, including Delta, may have been accessed — but no other customer personal information, such as passport, government ID, security or SkyMiles information was impacted.”
“Upon being notified of [24]7.ai's incident, Delta immediately began working with [24]7.ai to understand any potential impact the incident had on Delta customers, delta.com, or any Delta computer system,” the airline company said. “We also engaged federal law enforcement and forensic teams, and have confirmed that the incident was resolved by [24]7.ai last October. At this point, even though only a small subset of our customers would have been exposed, we cannot say definitively whether any of our customers' information was actually accessed or subsequently compromised.”
“We appreciate and understand that this information is concerning to our customers,” Delta said in its statement. “The security and confidentiality of our customers' information is of critical importance to us and a responsibility we take extremely seriously. Delta will launch delta.com/response, a dedicated website, noon ET April 5, which we will update regularly to address customer questions and concerns. We will also directly contact customers who may have been impacted by the [24]7.ai cyber incident. In the event any of our customers' payment cards were used fraudulently as a result of the [24]7.ai cyber incident, we will ensure our customers are not responsible for that activity.”
Delta has not disclosed how many customers have been affected.
The 3rd party, [24]7.ai, also commented on the breach.
“ [24]7.ai discovered and contained an incident potentially affecting the online customer payment information of a small number of our client companies, and affected clients have been notified. The incident began on Sept. 26, and was discovered and contained on Oct. 12, 2017. We have notified law enforcement and are cooperating fully to ensure the protection of our clients and their customers' online safety. We are confident that the platform is secure, and we are working diligently with our clients to determine if any of their customer information was accessed.”