Pegasus Airlines addresses allegations of 173 GB data breach

Pegasus Airlines has issued a statement following allegations on Dark Web forums that approximately 173 GB of corporate and customer data were compromised in a cyberattack.

Reports from threat intelligence sources claimed a hacker gained access to the airline’s Jira and Confluence servers, as well as its Amazon Web Services (AWS) infrastructure. The alleged stolen data included 430,000 Jira records, 37,000 Confluence files, information on 18,000 employees, and passenger details such as PNR records, passport numbers, and contact information.

Pegasus Airlines characterized the reports as misleading. While the company confirmed that a security vulnerability was identified within systems used for internal support and application development, it stated that the flaw has been resolved. The airline emphasized that these systems are not part of its critical operational infrastructure and that passenger databases were not hosted on the affected systems, meaning guest information was not compromised.