US Regional Air Envoy Air Becomes A Victim Of Cyber Attacks Related To Oracle

Envoy Air, American Airlines' largest subsidiary, confirmed it had been a victim of a cyberattack (photo: x @TheRecord_Media)

JAKARTA - Envoy Air, American Airlines' largest subsidiary, confirmed it had been a victim of cyber attacks in recent days. The attack is part of a global extortion campaign targeting Oracle's (Oracle E-Business Suite) business app.

In an official statement on Friday, October 17, a spokesman for Irving Air, Texas, stated that the company was aware of the incident, was conducting an internal investigation, and had reported it to law enforcement officials.

We have conducted a thorough review of the data involved and can ensure that no sensitive data or customer data has been affected, the spokesperson said. However, a small amount of business information and commercial contacts may have been compromised.

Envoy Air is the largest regional operator for American Airlines, with a fleet of more than 160 aircraft running about 875 flights daily.

The company is the second entity to confirm it has been hacked due to a campaign claimed by hacker group CL0P, known as an international cyber squeezing group with a long track record of exploiting third-party software vulnerabilities.

On Thursday evening, October 16, CL0P listed the name American Airlines as a victim on their website, although the exact time of the attack is not yet known. The group has not responded to a request for comment sent by Reuters via the email address they normally use.

An American Airlines spokesman said all questions related to the incident were directed at Envoy Air.

Meanwhile, Alphabet's security expert, Alphabet's subsidiary, said on October 9 that large amounts of customer data had been stolen in an attack operation that may have been going on since the previous three months.

Harvard University also confirmed it had experienced a similar attack earlier this week, according to a report by cybersecurity media The Record.

Attacks on Envoy Air and other victims highlight the increased risk of digital supply chain (supply chain attack), where hackers no longer attack the main targets directly, but infiltrate through third-party applications or service providers widely used by large companies around the world.