Members of Philippine Airlines' frequent flyer program Mabuhay Miles were assured their data is secured following a breach report into Accelya's internal systems and global airline customers. Accelya is PAL's third-party IT service provider.
"Accelya reassured us that this cybersecurity incident does not involve Mabuhay Miles membership passwords, flight itineraries, passport numbers, ticket numbers, contact details, or credit card information," said PAL vice president Marketing Ria Carrion-Domingo.
Domingo issued a notice to PAL's Mabuhay Miles cardholders and said the cybersecurity incident in Accelya involved only the members' name, date of birth, nationality, gender, join date, tier level and points balance.
She clarified that the notices were sent only to members affected by the data breach.
"Rest assured, neither your contact details nor financial information was included. We are informing you as a matter of transparency, even if this incident occurred outside the PAL system," she said.
As a precautionary measure, PAL is advised by cardholders to change their Mabuhay Miles account password and advises its clients to change passwords regularly and use a strong one or a unique one.
"Accelya assured us that immediate and necessary action was taken to contain the incident. Accelya confirmed that it has stopped the spread of the malware and that further security measures will be put in place to prevent a similar incident from happening in its systems. We confirm that this incident did not affect PAL's internal IT systems," the notice further reads.
Domingo maintained that the cybersecurity incident was already reported by PAL to the National Privacy Commission on 8 September 2022, which the NPC confirmed on Saturday.
