The Everest ransomware and extortion group claims to have breached Dublin Airport (DUB), the primary international airport serving Ireland. The group alleges it has exfiltrated 1,533,900 personal records related to passengers and airport operations.
According to the actor, the compromised data includes a wide range of sensitive passenger and flight information. The allegedly compromised data includes:
IdOperatingCarrierPNRFromCityAirportCodeToCityAirportCodeOperatingCarrierFlightNumberFlightDateCompartmentCodeSeatNUmberSequenceNumberPassengerStatusAirlineNumericCodeDocumentFormSerialNumberSelecteeIndicatorInternationalDocumentVerificationMarketingCarrierFrequentFlyerAirlineFrequentFlyerNumberFrequentFlyerTierFreeBaggageAllowanceFastTrackForAirlineUseDeviceNameDeviceIDDeviceTypeDepartureDtWorkstationIdTimestampBarcodeFormatVersionNumberNumberOfSegmentsNameFullElectronicTicketIndicatorPassengerDescriptionSourceOfCheckInSourceOfBoardingPassIssuanceDateOfIssueOfBoardingPassDocumentTypeAirlineDesginatorOfBoardingPassIssuerBaggageTagPlateNumbersFirstNonConsecutiveBaggageTagPlateNumberSecondNonConsecutiveBaggageTagPlateNUmber
