Air India admits to data breach impacting 4.5m customers, sat on the news for five weeks