Air France Sued Over ‘Hub-and-Spoke’ Salesforce Cyberattack

Air France was hit with a new lawsuit alleging the airline failed to protect customers’ personally identifiable information in a data breach discovered in July.

Plaintiffs Ethan Allison and Arya Soofiani, who sued the airline Wednesday in the US District Court for the Eastern District of New York, seek to represent a class of all individuals in the US whose PII was compromised in the breach, as well as a subclass of California residents.

The complaint alleges Air France failed to implement reasonable cybersecurity measures, which allowed hackers to access and steal customers’ personal data like names, addresses, and Social ...