South African Airways
Data Breach on May 19, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | flysaa.com | ||
| Threat Actor | INC_RANSOM | ||
| Date Discovered | May 19, 2025 | ||
| Description | South African Airways offers services including Business and Economy class, with a focus on safety, performance excellence, and customer satisfaction. | ||
| Leak Size | Unknown |
Credential Exposure for flysaa.com
We've indexed 2,500 @flysaa.com accounts from external breaches, plus 1,457 credentials for flysaa.com itself.
Last checked Aug 13, 2026
| @flysaa.com addresses from external breaches | |
|---|---|
| Third-party breaches | 2,375 accounts · across 262 breaches · 2,173 with a plaintext password · most recent Dec 18, 2025 |
| Combo lists | 1,287 accounts · most recent Aug 7, 2026 |
| Passwords for flysaa.com accounts | |
|---|---|
| Combo lists | 1,348 logins · most recent Aug 8, 2026 |
| Infostealer logs | 404 logins · 317 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
South African Airways was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.