Indonesian Lion Air's Malaysian subsidiary Malindo Air said on Monday that two former employees of its e-commerce contractor were responsible for its passenger data breach.