SpiceJet was contacted by the researcher to patch this flaw, but due to a delayed response, the researcher went ahead and alerted CERT-India. On affirming the researcher's findings and the concurrent lapse, CERT-In notified SpiceJet about the possibility of a data breach due to the unsecured database. Only then, SpiceJet's IT department patched the critical vulnerability.