Qilin Ransomware Gang Targets Luxury Jet Firm Elit Avia, Leaks Staff Documents

Ransomware group Qilin posts alleged staff data from Elit Avia, including passport photos, raising security concerns for employees at the luxury private jet operator.
Qilin Ransomware Gang Targets Luxury Jet Firm Elit Avia, Leaks Staff Documents
Table of Contents
    Add a header to begin generating the table of contents

    A ransomware group has listed Elit Avia, a European luxury aviation company, on its leak site, publishing documents allegedly stolen from the company’s systems.

    Staff Data Including Passport Details Posted by Qilin Ransomware Group

    The Qilin ransomware group has claimed responsibility for a cyberattack on Elit Avia, adding the business aviation firm to its dark web site where it names recent victims. The post includes crew member information, such as passport scans and internal documents related to flight staff.

    The Cybernews research team, which reviewed the leak, noted that it does not appear to indicate a major systems compromise. However, they also confirmed that several personal staff records were published. The exact amount of data taken remains unclear.

    “This can be dangerous for employees and the company itself. Because of leaked passport photos and personal information, employees could suffer from an increase in sophisticated phishing attacks, scams, possible identity theft, and fraud,” researchers stated.

    No customer data was seen in the exposed material. In luxury aviation, client information is typically the most sensitive and sought-after asset.

    Elit Avia, founded in 2006, offers aircraft management, private charter flights, and jet sales services. The company specializes in long-range luxury business jets for high-net-worth clients and global enterprises.

    The company has not yet issued a public statement. Cybernews noted it reached out to Elit Avia for comment and is awaiting a response.

    Qilin Ransomware Group Linked to Hundreds of Attacks Globally

    The Qilin ransomware cartel has been active since 2022 and has targeted a broad range of sectors, including media, manufacturing, and the arts. Past victims include:

    • Houston Symphony
    • Detroit PBS
    • Lee Enterprises, a major US newspaper chain
    • SK Group, a global industrial conglomerate

    According to Cybernews’ Ransomlooker tracker, Qilin has attacked at least 312 organizations in the last year alone, marking it as one of the most active ransomware gangs currently operating.

    The publication of Elit Avia’s staff documents appears to be an attempt to pressure the firm into paying a ransom, a common tactic used by groups like Qilin to force negotiations.

    Related Posts