Xuanye Group claims Air France-KLM breach after Asos hack

The threat actor Xuanye Group, previously linked to the Asos breach, claims to have obtained data from Air France-KLM and circulated samples. The airline has not yet confirmed the breach, so the scope and authenticity of the data remain unverified. This signals a potential pattern of targeting major consumer-facing firms, raising concerns about credential reuse and downstream fraud.