Unverified50% confidenceFactExact time
The attack entry point for this data breach was compromised credentials at the supplier Amadeus level, not Cathay Pacific's own systems.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/30/2026
First Seen
Valid until: 11/13/2026
Sources
Related Entities
Related Claims
UnverifiedOnce ECDSA signatures fall, attackers can forge valid cryptographic credentials for malicious data sources, inject backdoors and poison fine-tuning data, making model outputs untrustworthy.69% similarUnverified已有案例显示设备 Agent 曾删除系统文件导致系统崩溃，国家安全部门也曾发出安全提醒65% similarVerifiedAttackers can exploit stolen AI service account credentials to call API interfaces for computing power theft, and such behavior has frequently appeared in terms-of-service violation reports on platforms such as OpenAI and Anthropic.65% similarUnverifiedMost successful intrusions still begin with exposed services, weak authentication, stolen credentials, vulnerable software, or trusted third parties, rather than complex AI pipelines.65% similarUnverifiedSome commentary questions whether the "distillation attack" characterization is accurate, arguing it looks more like a typical credential leak and abuse incident; according to cross-verification from multiple sources, the affected accounts were indeed banned by Anthropic and OpenAI for "distillation behavior," and the platforms sent relevant notices to users when banning them.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1118491API
curl https://kongchang.com/api/v1/knowledge/claims/1118491MCP
get_claim(id=1118491)