Ryanair flight compensation data purportedly pilfered, leaked

Cybernews reports that European ultra low-cost airline Ryanair had its flight compensation data proliferating across underground cybercrime forums after a threat actor claimed to have breached the airline.

The threat actor allegedly had access to the airline's internal data, including emails, booking records, claim information, travel routes, and structured samples that appear to resemble records from an internal legal correspondence or case management platform. These documents contained emails, recipient details, court documents, case references, deadlines, and workflow notes that may indicate coordination of active litigation. Another sample appears to be from a legal claims management platform for Ryanair passenger compensation cases, allegedly exposing customer information, lawyer contacts, banking details, flight records, and legal case information tied to European routes.

Daily Dark Web, a cybersecurity monitoring publication, initially flagged the claims when the alleged attacker posted a data sample with the listing. As of this writing, the airline has not confirmed the alleged breach.