Russia: hacker attack paralyzed IT infrastructure of the largest air carrier

The information systems of one of Russia's leading air carriers were subjected to a large-scale cyber attack, as a result of which, according to hacker groups, a significant part of the company's internal digital infrastructure was destroyed. According to preliminary information, the attackers were inside the network for at least one year, carrying out a covert operation with the gradual destruction of key components of IT systems.

Hackers said that they managed to disable about 7 thousand servers, gain access to internal databases, including information about flights, infrastructure systems and personal devices of employees. Video surveillance systems, network storage, and on-board support components are among those affected. They estimated that the total amount of compromised data was at least 12 terabytes.

At the same time, the airline officially confirmed the presence of technical problems, refusing to specify the cause of the incident and possible recovery times. As of the morning of July 28, dozens of flights were canceled, including 42 departures and arrivals at Moscow's Sheremetyevo Airport. Passengers gathered in the terminals, waiting for information about the carrier's further actions.

The response to the incident was the beginning of an official investigation initiated by the Moscow Prosecutor's Office. The competent authorities study possible vectors of penetration into the company's IT environment and the extent of damage caused.

Given the stated scale of the intrusion and destruction of digital assets, the consequences of the incident may set a precedent in matters of national digital security and the sustainability of critical transport infrastructure. At the same time, the potential costs of restoring the IT architecture are estimated at multimillion-dollar amounts.

The incident raises questions not only about the security of corporate systems of large operators, but also about the sustainability of digital ecosystems in the face of a growing number of targeted attacks on the transport, energy and financial sectors.