The travel booking platform Skyticket reported a security breach resulting in the exposure of credit card data for 6,140 users. The incident affected customers who registered for the Skyticket Premium membership service between February 2017 and June 2018.
Leaked information includes credit card numbers, cardholder names, and expiration dates. For some users, only the card number was compromised, and the security codes were not involved in the leak.
The breach occurred because credit card logs were left on the company's own servers during a migration process. Although Skyticket transitioned to a third-party payment processor in June 2018, the payment change records were not properly deleted.
Skyticket stated that no instances of misuse or secondary financial losses have been identified to date. The company has contacted payment providers to monitor for suspicious activity and advised affected users to review their statements and update their payment details.
