Delta Sues Chatbot Vendor Faulted for Data Breach
Delta Air Lines is suing a vendor of customer service technology, 7.ai, for a breach of passenger data. The airline alleges the company had a weak Delta Air Lines is suing a tech vendor, 7.ai, for a breach of data affecting 825,000 passengers.
Gary Roboff, Senior Advisor, Shared Assessments said, “What’s particularly interesting about this situation is that Delta seems to have had contract provisions (“adequate security, including encryption” according to the article) and had its provider sign a GDPR compliance addendum in February 2018 requiring immediate breach notification, five months before notifying Delta about the breach. Delta says its vendor was aware of the breach when it signed that agreement. That said, if Delta actually used the words “adequate security” instead of defining more precisely what good security hygiene means, that could be a problem.”