Dublin Airport has announced that the personal financial information of some of its staff has been compromised in a cyber attack. The attack specifically targeted Aon, a third-party service provider, and was carried out by the cl0p ransomware gang. The hackers focused on exploiting the file-transfer software tool MOVEit, which is used by Aon. This attack has affected nearly 2,000 employees at Dublin Airport, as well as numerous organizations in the US and UK.
The Dublin Airport Authority (DAA) has confirmed that it is providing support and assistance to the affected employees. The cl0p ransomware group, known for operating as a ransomware-as-a-service (RaaS) group, is believed to share its software with other hackers. Aon has not yet provided any comments or statements regarding the incident.
In addition to Dublin Airport, other companies and agencies have also fallen victim to this cyber attack. US government agencies, the UK’s telecom regulator, and energy company Shell are among those affected. The attack exploited a security flaw in Progress Software’s MOVEit product, which was discovered at the end of May. The incident has also impacted organizations such as British Airways, the BBC, Boots, and the Health Service Executive (HSE) in Ireland.
This latest attack on the HSE comes two years after a major ransomware cyber attack that resulted in a complete shutdown of its computer systems. The recent breach compromised the data of a limited number of individuals, and the HSE confirmed that no more than 20 individuals were affected.
The cyber attack on MOVEit has caused concerns and raised awareness about the security of sensitive data transfer. The tool is designed to facilitate secure data transfers between businesses and their partners or third parties.
Another high-profile victim of cyber attacks is Taiwan Semiconductor Manufacturing Co (TSMC), one of the world’s largest chipmakers. TSMC announced that its supplier had been targeted, and the LockBit cybercriminal gang is demanding a $70 million ransom following the breach.
The series of cyber attacks on various organizations highlights the ongoing threats and challenges faced by businesses and institutions in protecting their data and infrastructure from sophisticated hackers.