An Air India flyer is seeking Rs. 30 lakh as damages for the Air India data breach. Around March 2021, a sophisticated cyber-attack on its Passenger Service System (PSS) provider leaked data of 45 lakh users. At that point in time however, the national Airline could not disclose the extent of damage caused by the attack. It also stated that it is in contact with various regulatory agencies in India and abroad and has apprised them about the incident in accordance with its obligations.
In May 2021, it disclosed details of the data breach and the mitigation measures undertaken. This data breach impacted around 45 lakh users. The flyer seeking damages is one of them. The flyer is claiming Rs 30 lakh in damages.
The legal notice to Air India is sent by Ritika Handoo, a Delhi-based journalist. She accused Air India of “knowingly, intentionally and deliberately leaking the personal data and for breach of sensitive information.” The notice is sent through Advocate Ashwani Kumar Dubey.
“Now that my client does not have any control over personal information as the same is stolen, it violates my client’s right to privacy and right to be forgotten as this loss of control over his personal data has led to a loss of my client’s informational autonomy, which is guaranteed as a fundamental right by the Supreme Court in Justice K.S. Puttuswamy (Retd.) & Anr. Vs. Union of India & Ors,” the notice said.