EgyptAir, the state-owned flag carrier of Egypt, has allegedly been compromised by an unauthorized party selling internal databases on a cybercrime forum. The leak, which purportedly contains over 104,000 records, includes sensitive human resources data and operational documents. The dataset is currently being offered for sale with a starting price of $300 USD in Monero (XMR).
According to the actor, the compromised files include CSV exports from the airline’s HR and user management systems (e.g., Egyptair_HROLC_Personal_Data2020.csv and Egyptair_HROLC_Users_Accounts.csv). The allegedly compromised data includes:
-
Personal Identification: National IDs, full names (in Arabic and English), and birth dates.
-
Contact Information: Physical addresses, cell phone numbers, home phone numbers, and personal email addresses (Gmail, Yahoo, etc.).
-
Account Credentials: User IDs, corporate email addresses (
@egyptair.com), and passwords. -
HR & Recruitment Data: Job application results, interview meeting times, HR notes, and applicant status.
-
Operational Documents: Internal files including fuel dockets for freighter flights (e.g., Flight MS 532), PDF files, and videos from staff emails.
