Last Update: at 11:16


Miles and More customers could access profiles of other people

Customers of the Lufthansa Group's frequent flyer program repeatedly landed on different profiles after logging in. There they were able to view sensitive data.

Customers who wanted to log in to Miles & More on Monday (9 December) to check their mileage or book flights might have been surprised. Many customers suddenly landed on other people’s profiles and were able to view their mileage and personal data. ” When I logged in ten times, I landed on my profile only four times – six times on someone else’s”, reports an aeroTELEGRAPH reader.

The reader saw information from customers of the Lot- of the Austrian and the Lufthansa-Miles-&-More-programme. Customer service informed him that the problem should be solved «in a few hours». Around 17:30 on Monday evening, the login did not work at all. “Technical problems” were given as the reason.

No access to accounts

Miles & More confirms the problem. In the period from 16:08 to 16:40, participants had been granted access to other accounts when logging in. «At 16:40 the login area was then deactivated for security reasons until further notice», a spokeswoman said.

Access to customer accounts has been blocked temporarily. The company is working at full speed to solve the problem and will take the necessary parallel measures to contact those affected, the spokeswoman said.

We’re on a break. Due to the Coronavirus pandemic we have decided to halt our English publication for a while and concentrate on our other ventures. But we’ll be back. Meanwhile you can find all our news, insights and more on our German site.