Huge OneFly data breach sees traveler IDs and payment details leaked

Malware attack virus alert , malicious software infection , cyber security awareness training to protect business.

---

• OneFly leaked thousands of sensitive customer records via unsecured Elasticsearch instance
• Data included names, IDs, flight details, full credit card info, and JWT tokens
• Cybernews urges access controls, refined logging, and IP whitelisting to mitigate risks