Kuala Lumpur: A massive data breach at Indonesian airline Lion Air that affected millions of customers was the fault of staff at a contractor in India, the airline's Malaysia subsidiary said Monday. Malindo Air said two former employees of GoQuo accessed and stole the data at the e-commerce company's Indian office.

"The matter has been reported to the police both in Malaysia and India," the airline said in a statement. Malindo did not provide any further details on the staffers but said that no customer payment details were leaked. Up to 35 million people had their names, birthdays, addresses and other details stolen in the breach, the Jakarta Post reported.