Payload Claims Ransomware Attack on Sunlight Express Airways
Summary
Payload claims it encrypted Sunlight Express Airways systems supporting ticketing, reservations and Sunlight Miles, and threatens to disclose passenger and operational data. The monitoring post says the claims are unconfirmed.
Key points
- A ransomware.live monitoring post attributes the claim to the actor payload and links it to an actor leak-site post.
- The claim alleges encryption of systems supporting ticketing, reservations and the Sunlight Miles loyalty program.
- The actor allegedly claims data exfiltration and threatens to disclose passenger and operational data unless a ransom is paid.
- The post says it cannot confirm the claims; no independent confirmation is provided.
Article Details
- Victim
- Sunlight Express Airways
- Claim Date
- 2026-04-16
- Encryption Status
- Claimed; unverified by the source
- Exfiltration Status
- Claimed; unverified by the source
- Exfiltrated Data
- The claim indicates passenger and operational data were exfiltrated; this is unverified.
- Ransom Demand
- The claim threatens disclosure unless a ransom is paid; no amount is stated.
- Leak Status
- Public disclosure was threatened; no publication of data is reported.