LION TRAVEL HACKED, 360,000 CUSTOMERS' INFO. TAKEN|雄獅旅行社客戶資料遭駭 外洩36萬筆

Lion Travel, Taiwan's biggest travel agency, reported its customer data was hacked. On May 23, the travel agency held a press conference to clarify the situation. It said that among the 360,000 customers whose personal information was leaked, only one was scammed. Most of them were travelers who booked a package tour. Those purchasing group tours are safe from hackers. The police are now investigating into the case. Recently, a lot of companies have been the victims of cyber-attacks, with customers' personal information stolen. Earlier this year, Mandarin Airlines suffered hacking of personal information, so one of its customers was swindled out of NT$520,000. Now Lion Travel, the biggest travel agency in Taiwan, has been hacked and its customers' data stolen. In the afternoon of May 23, the travel agency held an emergency press conference to clarify the situation. ==YU KUO-CHEN Lion Travel Spokesperson== From the period between Jan.1 to May.18, there were 360,000 purchase orders which suffered a loss of personal data. One order was scammed. (How much?) For NT$100,000. After hearing the news, some said that personal data protection seems to exist in name only. The public has lost confidence in big companies such as Lion Travel, which recorded a turnover of NT$ 21.8 billion last year. ==MR. HUANG consumer== In the past, I often looked for smaller travel agencies when traveling abroad. Later, I switched to bigger travel agencies because I though they provide more security. Now that these big travel agencies are hacked……well, forget it. I mean, I have little confidence left in them. Lion Travel said that its computer system was hacked from overseas. As to which country the attackers are from, the travel agency said that was still under investigation, and was unwilling to provide any information. It emphasized that so far, only one customer was scammed. Those whose personal information was leaked were customers buying package tours. Customers who booked group tours are safe from hackers. Their credit card transaction information was not stolen. ==TSAI YI-LANG Information Security Expert== Companies can be hacked in many ways. Hackers may attack system vulnerabilities, or application software loopholes. Email control gateway should be set to filter emails from unidentified sources. Lion Travel said that to prevent this from happening again, it has strengthened its information security system protection through data encryption, system upgrade, and internal network anti-hacking. By text message, Lion Travel warned its customers not to transfer money to ATMs if instructed to do so by unknown phone callers. Those receiving such phone calls should report to the police immediately. TRANSLATED BY ARIEL HSIEH 全台規模最大，去年營收超過218億的雄獅旅行社，爆發客戶資料遭駭。從今年初到五月中的訂單，合計約36萬筆個資外洩。其中有一名客戶已經遭到詐騙，損失金額10萬塊! 雄獅旅行社下午緊急在證交所，召開記者會表示，個資外洩部分多數是買票券或訂旅館自由行的客戶，團客不受影響，目前已透過簡訊通知並交由檢調偵辦。 近期大企業遭駭，個資外洩事件頻傳！華信航空因個資外洩，導致消費者遭詐騙52萬，如今，國內最大旅行社雄獅，也爆發重大個資外洩事件，下午緊急在證交所召開記者會。 ==雄獅旅遊發言人 游國珍 vs. 記者 黃立偉== 2017年一月一號 到五月18號 這段期間曾經跟雄獅 交易過的訂單資料 那所有的訂單資料 總共是36萬筆 那其中有一筆已被詐騙成功 金額多少 10萬 雄獅是全台規模最大的旅行社，去年營業額超過218億，有民眾擔心，像雄獅這麼大的企業，民眾個資保護也形同虛設，實在無所適從。 ==民眾 黃小姐== 一開始是找小公司 後來找大公司想說比較安全 可是連大公司也被駭 想說算了 就是覺得現在已經 對那種大公司也沒什麼信心了 雄獅旅行社表示，這起駭客來自境外，至於哪一國，以偵辦為由不願公開,強調目前受害民眾只有一名，多數是購買機票或訂房的自由行客戶為主，不過團客信用卡交易訊息沒有遭駭！ ==資安專家 蔡一郎== 那很多手法 可能包括攻擊系統的漏洞啦 或者是應用程式的漏洞 可能要有一些電子郵件閘道 去過濾一些異常的 這個來源的郵件 雄獅旅行社表示，為防個資外洩事件重演，已加強資安系統防護，包括加密升級，以及內部網路防駭等，目前檢調已深入追查，並透過簡訊警告所有客戶，接獲不明來電要求ＡＴＭ轉帳，立刻通報警方。 記者 黃立偉 陳昌維 台北報導