Starlink users impacted by purported Anuvu breach

Major in-flight entertainment and connectivity vendor Anuvu had data from airline and maritime customers using Starlink services exposed following a purported cyberattack, reports Cybernews.

Analysis of the screenshots included in the attackers' data leak site post showed information from Anuvu's maritime clients, including names, business market type, and Salesforce identifiers, as well as user credentials with password hashes and addresses primarily from last year.

Other data leaked included Anuvu managers' full names, emails, and home addresses, as well as Starlink contract lines with service and order line identifiers.

"Logins are probably used for a customer-facing dashboard of some sort, since there is a mix of employee and customer logins here. Some physical addresses match office locations. People mentioned here seem legit as well," said Cybernews researchers.

Organizations served by Anuvu, including Delta Airlines, Air France, and British Airways, have been warned of potential targeted phishing attacks and other malicious activity using information obtained from the cyberattack.