Cyber storm in Queretaro: Mexican airport faced a leak due to employee error

Lord777

Professional
Messages
2,581
Reputation
15
Reaction score
1,321
Points
113
According to officials, LockBit hackers stole non-valuable data. Is it true?

Queretaro, one of Mexico's largest airports, is facing a major cyber threat. The administration announced the incident on social media, saying it had already engaged cybersecurity experts to investigate the incident.

"We faced a cyberattack, but we asked for help from experts and continue to work. All computer systems are functioning normally. The safety of flights and our passengers remains our top priority, " the airport said in a statement.

Over the past decade, Queretaro has become one of the key hubs for air travel between Mexico, the United States and Europe. In 2022, it received more than a million passengers.

It is assumed that the cause of the incident was malware accidentally downloaded by one of the airport employees. Despite this, the operational security of the systems was not affected, and the response team quickly managed to localize and isolate the threat. The leak did occur, however, according to officials, the stolen information is of no value, since it was already publicly available.

The relevant state structures have been informed about the problem.

A group of LockBit hackers claimed responsibility for the attack. On October 27, the attackers announced that they would publish the stolen data if their conditions were not met. It is not yet known what information they actually have.

Most recently, LockBit announced the theft of data from a major aircraft manufacturer Boeing. According to Recorded Future News, the company has also launched an internal investigation.

This week, LockBit removed information about Boeing from the leak site. Researchers from vx-underground reported that they were in talks with hackers, but other details have not yet been disclosed.

The aviation industry is often targeted by cybercriminals. In October, Air Canada and Air Europa faced security incidents . Earlier, several US airports were subjected to a series of DDoS attacks.

In September, it became known about a cyber incident affecting Airbus: data from 3,200 contractors of the aircraft manufacturing giant, posted by an unknown hacker, was found on the shelves of the darknet.

Other airlines, including Scandinavian Airlines, as well as India's SpiceJet and Air India, regularly face similar problems. In November 2022, a subsidiary of Boeing — Jeppesen, which provides flight planning services, was forced to delay several flights due to a security breach of information systems.

Technology provider Accelya, which serves many major airlines, also reported an attack by the BlackCat group last year. At about the same time, in August, cybercriminals got hold of information about Bangkok Airways passengers.
 
Top