Security News > 2023 > July > Dublin Airport staff pay data 'compromised' by criminals

It's an awkward Monday for Dublin Airport after pay and benefits details for some 2,000 staff were apparently "Compromised" following a recent attack on professional service provider Aon.

Victims of the criminals exploiting the MOVEit flaws include multiple US government agencies, Ofcom, the BBC, British Airways and Aer Lingus.

Russian-speaking criminal group Clop has taken credit for attacks using the flaws and last week rolled out a long list of additional companies whose data it claimed to have stolen, including the University of California, Los Angeles, Siemens Energy and Schneider Electric.

It's not known if any of the Irish-headquartered group's employee pay data has been publicly leaked, although we've asked the DAA Group, which manages Dublin Airport, among others, for more details.

DAA confirmed to The Reg this morning that "As a result of a recent cyber-attack on Aon, a third-party professional service provider, data relating to some employees' pay and benefits was compromised."

Dublin airport has come in for flak for failing to restaff in time for the post-pandemic travel rush - a situation mirrored in many of the world's airports.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/07/03/dublin_airport_data/