Passenger Service System (US) Inc. (“SITA PSS”) operates passenger processing systems for airlines. SITA provides IT and telecoms services to around 400 members in the industry, claiming to serve around 90 percent of the global airline business.
After confirmation of the seriousness of the data security incident on February 24, SITA took immediate action to contact affected SITA PSS customers and all related organizations, the company said in a statement.
Upon discovering the attack late last month, SITA initiated targeted containment measures.
The attack remains under continued investigation by SITA’s Security Incident Response Team with the support of external cybersecurity professionals.
SITA said it notified airlines Malaysia Airlines; Finnair; Singapore Airlines, and Jeju Air, which have already made statements about the breach, but declined to name other affected airlines.