HACKER GROUP “SCATTERED SPIDER” TARGETING AIRLINES
August 20, 2025
Eckert Seamans has prepared the information in this update for educational purposes only. It does not constitute legal advice nor substitute for legal advice. Neither your receipt of information from this website nor your use of this website to contact Eckert Seamans or one of its attorneys creates an attorney-client relationship, as the firm may, for example, already represent another party involved in your matter. Accordingly, you should not provide confidential information to Eckert Seamans. Persons seeking legal advice should consult a licensed professional attorney in their state. The firm’s Terms of Use, Legal Notice, and Disclaimer detailed herein are expressly incorporated into the Aviation Regulatory Update.
Airlines should be aware that a hacking group known as the “Scattered Spider” has been targeting airlines in recent months and conducting ransomware attacks. The group uses social engineering to impersonate employees who are locked out of their company email accounts and contacts the company’s IT help desk to obtain access. Hawaiian Airlines and WestJet recently fell victim to this scheme, and it is therefore recommended that airlines promptly implement strict ID verification protocols at IT help desks and upgrade outdated multi-factor authentication methods such as SMS and voice codes.
In the event of a data security incident, our Cybersecurity, Data Protection & Privacy team can coordinate your incident response plan and guide you through the process of conducting internal and third-party investigations to collect, preserve, and document evidence to determine the nature and source of the incident and whether it is a reportable breach under applicable law. We also advise and assist clients with notification obligations, how to deal with the reputational impact of the breach and reduce the risk of resulting government investigations and/or litigation. Please contact us should you seek further information on data protection best practices.
This Aviation Blog is intended to keep readers current on developments in the law. It is not intended to be legal advice. If you have any questions, please contact Evelyn Sahr at 202.659.6622 or esahr@eckertseamans.com; Drew Derco at 202.659.6665 or dderco@eckertseamans.com, Samantha Walter at 412.566.1920 or swalter@eckertseamans.com; or Tyler Myers at 202.659.6642 or trmyers@eckertseamans.com, or any other attorney at Eckert Seamans with whom you have been working.
Share This Post
Authors
