Delta: Data of 'several hundred thousand' customers exposed

Update: 3:40 p.m.:

Delta Air Lines now says that payment-card information about "several hundred thousand" customers may have been exposed by a malware breach last fall.

The airlines says that the malware attack may have exposed customers' names, addresses, credit card numbers, card security codes and expiration dates.

Delta offered the additional details about the attack on Thursday, a day after saying that only a "small subset" of customers was affected.

The airline says it believes that the malware was in software used by (24)7.ai, which provided the airline with online chat services for customers, for about two weeks. The software company says it discovered and fixed the breach in October.

------

Delta Air Lines said Wednesday that some of its customers' payment information may have been breached in a cyberattack last fall.

The airline said the incident involved (24)7.ai, a chat-services provider used by Delta and other companies.

Delta says only "a small subset" of customers were affected, with payment information exposed from Sept. 26 to Oct. 12. It says no other personal details about customers, such as their passport, security or frequent-flyer account information, was affected.

The Atlanta-based airline says (24)7.ai informed it of the breach last week. Delta brought in federal law enforcement and forensic teams and confirmed that the unauthorized access was cut off by October.

Delta says it will make sure customers aren't held responsible if their payment cards were used fraudulently. It will create a website Thursday to update customers.

(24)7.ai, which is based in San Jose, California, said a "small number" of its client companies had their online customer payment information potentially exposed. It said it is confident that its platform is now secure and is working with its clients to determine if any of their customer information was accessed.

The company says it works with industries ranging from financial services to healthcare and e-commerce.