PHP Vulnerability Responses by Company

Cathay Pacific Airways Limited

Companies / web services
Aliases / services
キャセイパシフィック航空 / Cathay Pacific / 国泰航空 / Cathay Pacific Airways Limited / 國泰航空有限公司
Official website
https://www.cathaypacific.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Passenger and loyalty-related records

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

The October 2018 notice reports access to data of up to 9.4 million passengers. Exposed fields, including passport numbers and travel history, varied by person; passwords were not compromised and flight-operation systems were separate.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

If potentially affected, use official support to check the historical personal notification and affected fields. Historical dedicated contact channels may no longer operate.

Official service URL

Source URLs

  1. Official operator identityhttps://news.cathaypacific.com/cathay-pacific-announces-data-security-event-affecting-passenger-data-197802Service and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryLegal name and operator checked.
  2. Passenger data event, 25 October 2018Official notice; link to this PHP incident unconfirmedVerifies the named service at the notice date; not evidence of remediation for the current PHP vulnerabilities.

Comments