Air France and KLM alert customers to data breach on external platform

Air France and KLM disclosed unauthorized access to customer data on an external customer service platform, stating that internal systems were unaffected and no sensitive information (passwords, travel details, passport numbers, miles, or credit card data) was compromised. The incident is part of a broader wave of Salesforce-related attacks attributed to ShinyHunters impacting multiple companies; access was cut and security measures implemented, with notifications sent to the Dutch AP and France’s CNIL.