South African Airways (SAA) was hit by a ransomware attack on May 3, 2025, which temporarily disrupted access to the airline's website, mobile application, and several internal operational systems. The attack was claimed by the ransomware gang INC, who threatened to leak more data if ransom demands aren’t met. An expert digital forensic investigation is underway to determine the full scope and root cause. While there is no evidence of compromised customer data or financial management systems, the State Security Agency is involved due to SAA’s infrastructure being classified as a National Key Point. SAA is committed to strengthening cybersecurity defenses to mitigate future incidents.
Source: https://www.comparitech.com/news/ransomware-gang-inc-claims-recent-attack-on-south-african-airways/
TPRM report: https://scoringcyber.rankiteo.com/company/south-african-airways-corporate
"id": "sou326051825",
"linkid": "south-african-airways-corporate",
"type": "Ransomware",
"date": "5/2025",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization’s existence"