Supply chain
⛓ Supply Chain
Air France-KLM Group Third-Party Breach (August 2025)
Primary Source ↗Incident Details
Air France and KLM disclose data breaches impacting customers. Air France and KLM announced on Wednesday that attackers had breached a customer service platform and stolen the data of an undisclosed number of customers. Together with Transavia, Air France and KLM are part of Air France–KLM Group, a French-Dutch multinational airline holding company founded in 2004 and a major player in international air transport. With a fleet of 564 aircraft and 78,000 employees, Air France-KLM provides services to up to 300 destinations in 90 countries. In 2024, the aviation group transported 98 million passengers worldwide. Third-party company: Salesforce.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Salesforce
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2025-08-01 Breach occurred
- 2025-08-07 Publicly disclosed