Supply chain
⛓ Supply Chain
Airbus Third-Party Breach (September 2023)
Primary Source ↗Incident Details
Airbus investigates data leak allegedly involving thousands of suppliers. The European aerospace giant Airbus said on Tuesday that it is investigating a cybersecurity incident following reports that a hacker posted information on 3,200 of the company’s vendors to the dark web. A threat actor using the moniker “USDoD” posted Monday on BreachForums that they obtained access to an Airbus web portal after compromising the account of a Turkish airline employee. The hacker claimed to have details on thousands of Airbus vendors, including names, addresses, phone numbers and emails, according to a report from Hudson Rock. Third-party company: Turkish Airlines.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Turkish Airlines
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2023-09-01 Breach occurred
- 2023-09-12 Publicly disclosed