Scandinavian Airlines says cyberattack caused passenger data leak