Personal data of up to 9.4 million Cathay Pacific passengers have been hacked in the latest security breach to hit the aviation industry.