Breach reported in Cebu Pacific’s GetGo app server

MANILA, Philippines — Budget carrier Cebu Pacific confirmed yesterday that its GetGo application server had been breached Wednesday night, but assured the public that credit card information was not stored on that server.

Cebu Pacific, in a statement, admitted that there was an unauthorized access to a GetGo application server on Wednesday night, but gave assurance that the server has since been secured.

“We can also confirm that credit card information was not stored on that server,” the carrier said.

GetGo is Cebu Pacific’s rewards program for frequent fliers.

As a precaution following the incident, Cebu Pacific said it temporarily disabled log-in using GetGo credentials to the cebupacificair.com website and mobile app.

All GetGo online channels were also temporarily disabled while investigations on the matter continued.

The airline said both the cebupacificair.com website and mobile app, however, remain secure.

Cebu Pacific said the National Privacy Commission (NPC) was immediately informed about the incident, and is cooperating with the agency on the investigation.

Cebu Pacific is the country’s leading budget carrier, flying to 37 domestic and 26 international destinations across over 107 routes spanning Asia, Australia, the Middle East, and US.

Cathay Pacific in March last year suffered a major data leak affecting up to 9.4 million passengers.

A report submitted by Cathay Pacific to the NPC revealed that data of 102,209 Filipinos were compromised. Among those exposed were around 35,700 Philippine passport numbers, as well as credit card details of 144 Filipino users.