Air India has revealed that a data breach compromised 4.5 million passengers dating back to 2011.