Security News > 2020 > April > SFO Websites Hacked: Airport Discloses Data Breach

The San Francisco International Airport disclosed this week two of its websites had been hacked and lead to the disclosure of some users' login credentials at both sites.
"The attackers inserted malicious computer code on these websites to steal some users' login credentials," according to a message posted to both site's homepages by the SFO's Airport Information Technology and Telecommunications director.
"Users possibly impacted by this attack include those accessing these websites from outside the airport network through Internet Explorer on a Windows-based personal device or a device not maintained by SFO."The notice goes on to state, "[I]t appears the attackers may have accessed the impacted users' usernames and passwords used to log on to those personal devices.
The site SFOConstruction.com is dedicated to SFO construction projects and is a clearinghouse for outside third-parties interested bids and contracts tied to work related to the airport.
The second compromised site, SFOConnect.com, is an information hub for airport employees to find up-to-date airport security news tied to badges and ground transportation.
News URL
https://threatpost.com/sfo-websites-hacked-airport-discloses-data-breach/154709/
Related news
- PowerSchool previously hacked in August, months before data breach (source)
- HPE notifies employees of data breach after Russian Office 365 hack (source)
- Fintech giant Finastra notifies victims of October data breach (source)
- US drug testing firm says data breach impacted 3.3 million people (source)
- US drug testing firm DISA says data breach impacts 3.3 million people (source)
- Background check, drug testing provider DISA suffers data breach (source)
- Data breach at Japanese telecom giant NTT hits 18,000 companies (source)
- Western Alliance Bank notifies 21,899 customers of data breach (source)
- Sperm donation giant California Cryobank warns of a data breach (source)
- Pennsylvania education union data breach hit 500,000 people (source)