Editing Cathay Pacific (section)

==== 2018 data breach ====
In 2018, the airline discovered a data breach.<ref>{{cite web |url=https://www.msn.com/en-us/money/companies/millions-of-passengers-hit-in-worst-airline-data-hack-ever/ar-BBOR5h1?li=BBnbfcL&ocid=mailsignout#image=1 |title=Millions of passengers hit in worst airline data hack ever |publisher=Msn.com |date=25 October 2018 |access-date=20 February 2020 |archive-date=27 July 2020 |archive-url=https://web.archive.org/web/20200727185504/https://www.msn.com/en-us/money/companies/millions-of-passengers-hit-in-worst-airline-data-hack-ever/ar-BBOR5h1?li=BBnbfcL&ocid=mailsignout#image=1 |url-status=live }}</ref> Data of around 9.4&nbsp;million passengers were compromised during the breach, with 860,000 passport numbers, 245,000 Hong Kong identity card numbers, 403 expired credit card numbers, and 27 credit card numbers without CVV being accessed. However, no passwords were stolen. The breach was suspected in March 2018, but was confirmed only in May 2018.<ref>{{cite news|url=https://www.reuters.com/article/us-cathay-pacific-cyber/cathay-pacific-flags-data-breach-affecting-94-million-passengers-idUSKCN1MY26L|title=Cathay Pacific flags data breach affecting 9.4 million passengers|work=Reuters|access-date=24 October 2018|archive-date=24 October 2018|archive-url=https://web.archive.org/web/20181024182849/https://www.reuters.com/article/us-cathay-pacific-cyber/cathay-pacific-flags-data-breach-affecting-94-million-passengers-idUSKCN1MY26L|url-status=live}}</ref><ref>{{cite news|url=https://www.bbc.com/news/business-45974020|title=Cathay Pacific data hack hits 9.4 million passengers|work=BBC News|access-date=25 October 2018|archive-date=25 October 2018|archive-url=https://web.archive.org/web/20181025082829/https://www.bbc.com/news/business-45974020|url-status=live}}</ref> In March 2020, the company was fined £500,000 (U.S. $639,600) by the British Information Commissioner's Office (ICO) and avoided the heftier penalty of U.S. $564&nbsp;million under the European Union's GDPR-derived data privacy laws, which were not in force during the discovery of the breach.<ref>{{Cite news |url=https://www.scmp.com/news/hong-kong/transport/article/3065071/cathay-pacific-fined-ps500000-british-privacy-watchdog |title=UK fines Cathay for 2018 data breach but hefty European penalty avoided |date=4 March 2020 |website=South China Morning Post |access-date=5 March 2020 |archive-date=5 March 2020 |archive-url=https://web.archive.org/web/20200305012609/https://www.scmp.com/news/hong-kong/transport/article/3065071/cathay-pacific-fined-ps500000-british-privacy-watchdog |url-status=live }}</ref>