{"id":52599,"date":"2023-07-03T15:14:59","date_gmt":"2023-07-03T15:14:59","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/dublin-airport-staff-pay-data-compromised-by-criminals\/"},"modified":"2023-07-03T15:14:59","modified_gmt":"2023-07-03T15:14:59","slug":"dublin-airport-staff-pay-data-compromised-by-criminals","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/dublin-airport-staff-pay-data-compromised-by-criminals\/","title":{"rendered":"Dublin Airport staff pay data ‘compromised’ by criminals"},"content":{"rendered":"

It’s an awkward Monday for Dublin Airport after pay and benefits details for some 2,000 staff were apparently “compromised” following a recent attack on professional service provider Aon.<\/p>\n

Aon appears to be the latest victim of the massive supply chain attack sweeping the world via since-patched flaws in Progress Software’s massively popular MOVEit file transfer suite. The vendor fixed the third critical flaw<\/a> in mid-June, a day after a proof-of-concept exploit for the hole emerged.<\/p>\n

It’s not known if any of the Irish-headquartered group’s employee pay data has been publicly leaked, although we’ve asked the DAA Group, which manages Dublin Airport, among others<\/a>, for more details. DAA confirmed to The Reg<\/em> this morning that “as a result of a recent cyber-attack on Aon, a third-party professional service provider, data relating to some employees’ pay and benefits was compromised.”<\/p>\n

Despite being publicly blamed by DAA, Aon does not appear to have made a public statement about the attack, and did not immediately respond to The Register<\/em>‘s request for comment. It appears to have links to the MOVEit tool on an SFTP site on its domain aimed at clients and employees.<\/p>\n

DAA was keen to emphasize that its own systems had not been exposed, and said it had notified the Irish Data Protection Commission and was “offering support, advice and assistance to employees impacted by this criminal cyber-attack.”<\/p>\n