TAP Air Portugal

The systems of TAP Air Portugal were recently targeted by the Ragnar Locker ransomware gang which made its website and app go unreachable for some time.

However, the company soon blocked the attack and told that the attackers could not gain access to customer information stored on impacted servers.

On contrary, The group posted a screenshot of a spreadsheet containing the customer information stolen from TAP's servers, including names, dates of birth, emails, and addresses.

Source: https://www.bleepingcomputer.com/news/security/ragnar-locker-ransomware-claims-attack-on-portugals-flag-airline/

TPRM report: https://scoringcyber.rankiteo.com/company/tap-air-portugal

"id": "tap16371222",
"linkid": "tap-air-portugal",
"type": "Ransomware",
"date": "08/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Aviation',
                        'name': 'TAP Air Portugal',
                        'type': 'Organization'}],
 'data_breach': {'data_exfiltration': True,
                 'file_types_exposed': ['Spreadsheet'],
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'description': 'The systems of TAP Air Portugal were recently targeted by the '
                'Ragnar Locker ransomware gang which made its website and app '
                'go unreachable for some time.',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 'emails',
                                 'addresses'],
            'downtime': 'Some time',
            'systems_affected': ['website', 'app']},
 'motivation': 'Financial Gain',
 'ransomware': {'data_exfiltration': True,
                'ransomware_strain': 'Ragnar Locker'},
 'threat_actor': 'Ragnar Locker',
 'title': 'TAP Air Portugal Ransomware Attack',
 'type': 'Ransomware'}