Airdeals, Airtips, and Payair Allegedly Targeted in Data Breach and Extortion Attempt
Summary
A threat actor claims to have compromised Airdeals, Airtips, and Payair, taken Airtips offline, and obtained customer and payment data. The actor reportedly demands payment within 48 hours and offers the data for sale for $300.
Key points
- A threat actor claims three UK-based airline agency websites—Airdeals, Airtips, and Payair—were compromised; the article provides no independent confirmation.
- The actor claims Airtips was taken offline and threatens to publish the data unless paid within 48 hours.
- The actor is reportedly offering the database and files for sale on a cybercrime forum for $300.
- The claimed stolen material includes source code, configurations, 2.97 GB of backups, and a database with 102,220 lines.
- The actor also claims access to mailboxes and customer names, payment methods, payment card numbers, and transaction data.
Article Details
- Victim Organization
- Airdeals, Airtips, and Payair
- Incident Type
- Alleged data breach and extortion attempt involving three airline agency websites
- Data Types Exposed
- Website source code and configurations
- Backups
- Mailbox access and email messages
- Customer names
- Payment methods
- Payment card numbers and transaction data
- Affected Records
- A database reportedly contained 102,220 lines; the number of affected records or individuals is not confirmed.
- Affected Data Size
- The attacker reportedly claimed to have 2.97 GB of backups.
- Operational Impact
- The attacker claimed to have taken the Airtips website offline; this was not independently confirmed in the article.
- Ransom Or Extortion
- The attacker reportedly demanded payment within 48 hours and threatened public release of the stolen data. The demand amount was not stated. The database and files were also reportedly offered for sale on a cybercrime forum for $300.
- Claim Status
- claimed