Security News > 2023 > October > BianLian extortion group claims recent Air Canada breach
The BianLian extortion group claims to have stolen 210GB of data after breaching the network of Air Canada, the country's largest airline and a founding member of Star Alliance.
BianLian claims to have exfiltrated technical and operational data spanning from 2008 to 2023, including details about the company's technical and security challenges, SQL backups, personal information of employees, data regarding vendors and suppliers, confidential documents, and archives from company databases.
In a statement shared with BleepingComputer today, Air Canada said they were aware of BianLian threats but didn't confirm the extortion group's claims that they were behind the breach.
Air Canada said at the time that customer credit card data wasn't exposed and that no aircanada.com accounts were affected as they're not connected to the mobile app.
This week, Air Europa, the third-largest airline in Spain, also warned customers to cancel their credit cards after attackers accessed their card information in a recent data breach.
Air Canada discloses data breach of employee and 'certain records'.