KLM has confirmed that a massive cyberattack in August 2025 disrupted its operations and exposed the personal data of millions of passengers. Hackers reportedly targeted a third-party customer service platform, causing chaos across multiple systems and routes.
Flights Canceled After Data Breach
The breach affected about six million KLM passengers and a similar number from Air France. The incident led to widespread flight cancellations and rebooking problems across Europe, leaving several travelers stranded at major airports.
Passenger Faces Nightmare Rebooking
One traveler shared that their flight from Berlin to Taipei via Amsterdam was canceled shortly after check-in. KLM rebooked them through Amsterdam and Hong Kong, but that flight too was canceled within an hour as the airline struggled with the outage.
Chaotic Alternative Arrangements
KLM later offered another route via Frankfurt and Hong Kong through Lufthansa. However, it involved multiple short layovers and required self-check-in at Hong Kong, making the journey extremely difficult. The passenger eventually booked a new ticket at personal cost and faced trouble retrieving checked luggage.
Data Exposure and Official Response
According to KLM, the breach originated from an external vendor’s software that managed customer inquiries. It exposed personal data such as names, contact details, email subject lines, and Flying Blue loyalty information. However, payment details and passwords remained secure.
KLM’s Cybersecurity Clarification
The airline stated that its core systems were not compromised. However, communication breakdowns between internal networks and third-party vendors triggered large-scale operational disruptions. KLM notified Dutch and French data protection authorities in compliance with GDPR regulations.
Passengers Seek Compensation
As KLM continues to work with regulators to strengthen its cybersecurity framework, affected passengers are demanding refunds and compensation for canceled flights, additional costs, and the distress caused by the prolonged system failures.
