Aeroflot, Russia's largest airline and national carrier, suffered a cyberattack that caused widespread flight delays and cancellations. Over 50 flights were canceled, including popular domestic routes. The attack, claimed by pro-Ukrainian hacker groups Silent Crow and Belarusian Cyber-Partisans, compromised Aeroflot's IT infrastructure, leading to significant financial damage. The disruption impacted the airline's subsidiaries and caused long lines and delays at Russian airports.
Source: https://therecord.media/cyberattack-aeroflot-russia-delays
TPRM report: https://scoringcyber.rankiteo.com/company/aeroflot---russian-airlines
"id": "aer749072825",
"linkid": "aeroflot---russian-airlines",
"type": "Cyber Attack",
"date": "7/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'industry': 'Aviation',
'location': 'Russia',
'name': 'Aeroflot',
'size': 'Large',
'type': 'Airline'},
{'industry': 'Aviation',
'location': 'Russia',
'name': 'Rossiya',
'type': 'Airline'},
{'industry': 'Aviation',
'location': 'Russia',
'name': 'Pobeda',
'type': 'Airline'}],
'attack_vector': 'Unspecified',
'data_breach': {'data_exfiltration': 'Yes',
'type_of_data_compromised': ['flight history',
'audio recordings of internal '
'calls',
'surveillance data',
'staff monitoring systems']},
'date_detected': '2023-10-02',
'date_publicly_disclosed': '2023-10-02',
'description': 'Aeroflot, Russia’s largest airline, suffered a cyberattack '
'causing widespread flight delays and cancellations. The '
'attack was claimed by pro-Ukrainian hacker group Silent Crow '
'and the Belarusian Cyber-Partisans.',
'impact': {'data_compromised': ['flight history',
'audio recordings of internal calls',
'surveillance data',
'staff monitoring systems'],
'downtime': 'Ongoing',
'operational_impact': 'Widespread flight delays and cancellations',
'revenue_loss': 'Stock dropped 4%',
'systems_affected': 'IT infrastructure'},
'investigation_status': 'Ongoing',
'motivation': 'Political and financial disruption',
'references': [{'date_accessed': '2023-10-02',
'source': 'Russian authorities'}],
'regulatory_compliance': {'legal_actions': 'Criminal case opened'},
'response': {'law_enforcement_notified': 'Yes'},
'threat_actor': ['Silent Crow', 'Belarusian Cyber-Partisans'],
'title': 'Cyberattack on Aeroflot',
'type': 'Cyberattack'}