Key Metrics
0
Heat Index-
Impact LevelLow
-
Scope LevelNational
-
Last Update2025-06-29
Key Impacts
Positive Impacts (2)
Negative Impacts (7)
Event Overview
The Scattered Spider hacking group has expanded its cyberattacks to the aviation sector, with Hawaiian Airlines confirming a cybersecurity incident on June 26, 2025. The group, known for targeting retailers and insurers, uses social engineering and exploits vulnerabilities. Hawaiian Airlines assured passengers that flights remain unaffected. Cybersecurity experts, including Google's Mandiant Consulting, warn of rising threats in transportation. The incident highlights broader concerns about critical infrastructure resilience against sophisticated cybercrime.
Event Timeline
Scattered Spider Hacking Group Targets Hawaiian Airlines and Aviation Sector
The notorious Scattered Spider hacking group has shifted its focus to the aviation sector, prompting cybersecurity warnings concerning potential disruptions. The group, known for its attacks on retailers and insurance companies in the U.S. and U.K., has been linked to significant operational interruptions across various industries. Hawaiian Airlines confirmed on June 26, 2025, that they are addressing a "cybersecurity incident" affecting IT systems. However, the airline reassured passengers that full flight schedules remain operational and that customer travel has not been impacted. Charles Carmakal, chief technology officer at Google's Mandiant Consulting, commented on the rise of incidents in the airline and transportation sectors that mirror the methods used by Scattered Spider, which employs social engineering tactics alongside known security vulnerabilities. This latest development underscores a broader issue facing many insurance providers, including Aflac, which has reported potential data breaches related to the very same cybercriminal entities. In response to these threats, Hawaiian Airlines is actively cooperating with federal authorities and cybersecurity experts to investigate and remediate the situation while prioritizing the safety of their guests and employees. The ongoing cyberattacks reflect a concerning trend in targeted assaults on critical infrastructure, thereby raising alarms about the resilience of the aviation sector against sophisticated cybercrime.