City
Epaper

New ransomware group takes responsibility for Sabre data breach

By IANS | Updated: September 7, 2023 17:20 IST

San Francisco, Sep 7 A new ransomware group known as Dunghill Leak has claimed that it is the ...

Open in App

San Francisco, Sep 7 A new ransomware group known as Dunghill Leak has claimed that it is the one that hacked the systems of global travel booking giant Sabre.

According to TechCrunch, in a listing on its dark web leak site, the group claimed responsibility for the apparent cyberattack, alleging it took about 1.3 terabytes of data, including databases on ticket sales and passenger turnover, employees' personal data, and corporate financial information.

"Sabre is aware of the claims of a data exfiltration made by the threat group and we are currently investigating to determine their validity," Sabre spokesperson Heidi Castle was quoted as saying.

The group posted a portion of the allegedly stolen files, claiming that the entire cache would be made "available soon".

According to the report, some screenshots showed several database names relating to booking details and billing containing tens of millions of records have been discovered, though it is unknown whether the hackers had access to the databases themselves.

Some other screenshots showed employee records, such as email addresses and work locations.

One screenshot included employee names, nationalities, passport numbers, and visa numbers.

However, it is unknown when the alleged breach occurred, but screenshots posted by the extortion group show data as recent as July 2022, the report said.

Till now, Dunghill Leak has claimed responsibility for targeting American designer and manufacturer of coin-operated video games Incredible Technologies, food giant Sysco, and Gentex, a manufacturer of automotive products.

Sabre is a travel reservation system used to power bookings and check-ins for airlines and hotels in the US. Last month, the notorious ransomware gang BlackCat also known as ALPHV, claimed responsibility for the cyberattack disclosed by the Japanese watchmaker Seiko firm.

The company on August 10, issued a data breach notification, stating that an unauthorised third party gained access to at least a portion of its IT infrastructure and accessed or exfiltrated data, reports Bleeping Computer.

Disclaimer: This post has been auto-published from an agency feed without any modifications to the text and has not been reviewed by an editor

Open in App

Related Stories

International"Ready to play any role in ensuring his safe return to India": Sudan Ambassador on reports of Indian national abduction

InternationalChina denies Trump's claim of secret nuclear tests, urges US to contribute to global stability

InternationalIndia sends rabies aid to Timor-Leste as Island nation battles outbreak

AurangabadFrequent cancellations by IndiGo frustrate passengers; Call for higher civil aviation authorities to look into issue

EntertainmentDakota Johnson is dating again after split from Chris Martin

Technology Realted Stories

TechnologyNortheast emerging as new frontier of Indo-French collaboration: Jyotiraditya Scindia

TechnologyIndia plans Rs 65,400 crore push to build its own fighter jet engines by 2035

TechnologyCreate Logos that Misbehave: When Branding Gets Delightfully Weird

TechnologyStrict orders issued to speed up farmers’ crop insurance claims: Shivraj Singh Chouhan

TechnologyIndia shows power of sharing knowledge and learning together: Industry leader