PHP Vulnerability Responses by Company

Koninklijke Luchtvaart Maatschappij N.V.

Companies / web services
Aliases / services
KLM / KLM Royal Dutch Airlines / KLMオランダ航空 / 荷兰皇家航空 / Koninklijke Luchtvaart Maatschappij N.V.
Official website
https://www.klm.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

KLM external customer-service platform

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

On 6 August 2025 KLM disclosed unauthorized customer-data access on an external support platform. Internal systems were unaffected; passwords, travel details, miles, passport and card data were not stolen.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check the notification sent to potentially affected customers and be especially alert to suspicious emails and calls.

Official service URL

Source URLs

  1. 6 August 2025 customer data notificationhttps://nieuws.klm.com/klm-informeert-klanten-over-incident-met-persoonsgegevens/Service and operation documentation
Related official sources
  1. Legal operatorOfficial information directoryKLM identifies the Dutch airline’s legal name and Amstelveen address, separately from the Air France-KLM holding group.
  2. 6 August 2025 customer data notificationOfficial information directoryVerifies incident scope, disclosures and customer guidance.

Comments