THURSDAY MAY 08, 2025
×
Search AeroXplorer
Hackers Demand $6 Million from Seattle Airport Operator for Files Stolen During Cyberattack

Hackers Demand $6 Million from Seattle Airport Operator for Files Stolen During Cyberattack

BY JOE GVORA Published on September 19, 2024 0 COMMENTS
Photo: AeroXplorer | Hadi Ahmad

 

Seattle-Tacoma International Airport is still facing shortcomings following a cybersecurity attack that reportedly started back on August 24. As a previous article suspected, a ransomware organization has been found to be behind these attacks.

 

A Wing's Ransom

 

Airport officials are claiming a ransomware group called Rhysida has encrypted and stolen data from Seattle-Tacoma (Sea-Tac) airport's systems — "eight files" to be precise, according to Sea-Tac managing director of aviation Lance Lyttle.

 

The group has allegedly demanded 100 bitcoin, which is around $6 million, in exchange for the stolen files. The Port of Seattle, which owns and operates Sea-Tac, has declined the offer, citing paying the ransomware wouldn't be "good use of taxpayer money".

 

According to Lyttle in front of a U.S. Senate committee on Monday, Rhysida has posted the eight files up on its dark website, though there's no word on what these files contain or how large or important they are to the airport. If any personal information happens to be found in one of these files, the airport will contact the individuals in question.

 



ADVERTISEMENT • REMOVE ALL ADS

 

Lyttle also mentions the cyberattack and its effects on the airport have since subsided, but the FBI is conducting a criminal investigation.

 

The airport isn't facing any more constant cancellations or delays, but concessions had to be taken for many flights to run smoothly, such as the use of paper boarding passes over check-in kiosks. The airport's website is still unavailable, but the website's URL now redirects to a makeshift news page that documents the updates revolving around last month's cyberattack.

 

Photo: AeroXplorer | Peter Cuthbert

 

What Is Rhysida?

 

Rhysida first emerged in May 2023, with the group being named after the Rhysida class of centipede. Due to internal communications on the group's website, researchers believe the group is based somewhere in Russia. Here are some of the organization's previous cyber attacks:
 

 



ADVERTISEMENT • REMOVE ALL ADS

 

The Port of Seattle issued a statement earlier this week revealing more about Rhysida's cyberattack last month:

 

“Our investigation of what data the actor took is ongoing, but it does appear that some Port data was obtained by the actor in mid-to-late August. Assessment of the data taken is complex and takes time, but we are committed to these efforts and notifying potentially impacted stakeholders as appropriate.”
 

 AeroXplorer is on Telegram! Subscribe to the AeroXplorer Telegram Channel to receive aviation news updates as soon as they are released. View Channel 
Joe Gvora
I'm a content specialist that has written content for multiple Fortune 500 companies. I have written travel blogs and news for many businesses spanning from local businesses overseas to big tech corporations. Learning new things is my favorite part of writing.

Comments (0)

Add Your Comment

SHARE




TAGS

NEWS sea-tacnews seattle airport hacking hack aviation cyberattack

RECENTLY PUBLISHED

Learjet Owned By Vince Neil Crashes Into Gulfstream Jet, 1 Fatality Confirmed On February 10th, around 14:30 local time, a Learjet private jet aircraft crashed into another private jet after landing at Scottsdale Airport (SCF) in Arizona. NEWS READ MORE »
Seattle Plane Strike 2025: Japan Airlines and Delta Collision Raises Safety Concerns Seattle-Tacoma International Airport saw a concerning incident on Wednesday morning when a Japan Airlines (JAL) plane clipped a parked Delta Air Lines jet while taxiing. Thankfully, no one was injured, but passengers described the collision as a frightening experience. NEWS READ MORE »
Ethiopian Airlines Expands Cargo Fleet with New Boeing 777 Freighter Ethiopian Airlines has expanded its cargo fleet with a brand-new Boeing 777 Freighter, registered as ET-BAB (MSN 68140). The aircraft was delivered directly from Boeing’s factory in Everett, Washington, USA, and landed at Addis Ababa Bole International Airport at 3:41 PM (GMT+3) on Wednesday, January 22, 2025. NEWS READ MORE »


SHOP

$2999
NEW!AeroXplorer Aviation Sweater Use code AVGEEK for 10% off! BUY NOW

FOLLOW US ONLINE