Security News > 2020 > April > SFO Websites Hacked: Airport Discloses Data Breach

The San Francisco International Airport disclosed this week two of its websites had been hacked and lead to the disclosure of some users' login credentials at both sites.
"The attackers inserted malicious computer code on these websites to steal some users' login credentials," according to a message posted to both site's homepages by the SFO's Airport Information Technology and Telecommunications director.
"Users possibly impacted by this attack include those accessing these websites from outside the airport network through Internet Explorer on a Windows-based personal device or a device not maintained by SFO."The notice goes on to state, "[I]t appears the attackers may have accessed the impacted users' usernames and passwords used to log on to those personal devices.
The site SFOConstruction.com is dedicated to SFO construction projects and is a clearinghouse for outside third-parties interested bids and contracts tied to work related to the airport.
The second compromised site, SFOConnect.com, is an information hub for airport employees to find up-to-date airport security news tied to badges and ground transportation.
News URL
https://threatpost.com/sfo-websites-hacked-airport-discloses-data-breach/154709/
Related news
- UN aviation agency investigating possible data breach (source)
- Washington state sues T-Mobile over 2021 data breach security failures (source)
- Largest US addiction treatment provider notifies patients of data breach (source)
- STIIIZY data breach exposes cannabis buyers’ IDs and purchases (source)
- EU law enforcement training agency data breach: Data of 97,000 individuals compromised (source)
- Wolf Haldenstein law firm says 3.5 million impacted by data breach (source)
- Otelier data breach exposes info, hotel reservations of millions (source)
- PayPal to pay $2 million settlement over 2022 data breach (source)
- UnitedHealth now says 190 million impacted by 2024 data breach (source)
- PowerSchool starts notifying victims of massive data breach (source)