The airline says personal and financial details of customers making online bookings were compromised.