Terms Unconditional

Global Airlines (Top 40) · Airline (Asia, LCC) · Data breach

IndiGo

Headline

No IndiGo customer-data breach confirmed this pass, but IndiGo disclosed on December 31, 2020 that some of its servers had been hacked earlier that month and that internal documents might be posted publicly…

Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.

No IndiGo customer-data breach confirmed this pass, but IndiGo disclosed on December 31, 2020 that some of its servers had been hacked earlier that month and that internal documents might be posted publicly (it described the impact as minimal). IndiGo is India's dominant domestic carrier by a wide margin, which makes the absence notable rather than reassuring - a carrier of that scale is a proportionally large target. India's Digital Personal Data Protection Act is recent and its enforcement machinery was still being stood up through this period, so the window in which an incident would have been forced into public view was narrow. Recommend a targeted follow-up once DPDP Act enforcement produces a track record.

  • SeveritySeverity 3 of 5, not independently verified. No IndiGo customer-data breach confirmed this pass, but IndiGo disclosed on December 31, 2020 that some of its servers had been hacked earlier that month and that internal documents might be posted publicly…
  • Evidence tierUnassigned
  • Claims confirmedNo sourced claims yet
  • Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Last verified 96 days agoverified 96 days ago0180 days
Freshness. Last verified 96 days ago (2026-08-04); stale after 180 days.

Terms

Arbitration

Not independently confirmed this pass; India's Digital Personal Data Protection Act (DPDPA) applies domestically.

Data sharing

Not independently confirmed this pass with an IndiGo-specific breach; note the SEPARATE Air India breach (documented elsewhere in this tab, 4.5 million passengers via the 2021 SITA incident) is a DIFFERENT Indian carrier — avoid conflating the two.

Fees and billing

Not itemized this pass.

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.

No published channel
Paper trail: none. No published channel.

Evidence

No claims have been itemized for this row yet.

No sources are on file for this row yet.

Source vault

Link status: Candidate - not yet fetched

DocumentLast fetchPDF
Privacy policy
goindigo.in/information/privacy-policy.html
Not fetched yetNO (HTML only)
Terms of service
goindigo.in/information/conditions-of-carriage.html
Not fetched yetNO (HTML only)
Website
No URL recorded
Not fetched yet—
Primary source
No URL recorded
Verification: Unverified - heuristic first draft
Not fetched yet—

Enforcement

No enforcement actions are linked to this row.

State statute

No HQ state on file, so no state statute applies by headquarters.