Air Canada: Mobile App Security Breach Potentially Affected 20,000 Customers

Air Canada has reported that some of its mobile app users' personal data might have been compromised in a breach this month. The carrier has locked all mobile accounts following "unusual login behavior" between Aug. 22 and 24 and is requiring passengers to change their passwords.

The breach could have compromised basic personal information like name, email address, phone number and passport and known traveler information for those who stored such data in the app, but credit card information is encrypted and protected. Aeroplan loyalty numbers also were among the visible data in the app, though the app does not store passwords. Even so, Air Canada is advising passengers to monitor their credit cards and Aeroplan activity as a best practice.

Air Canada estimates that about 20,000 profiles, about 1 percent of its 1.7 million mobile app profiles, could have been improperly accessed during the breach. On Wednesday, it began contacting potentially affected customers by email. Accounts on Air Canada's website are not linked to its app accounts and were not affected.