European heavyweights Airbus, Altran targeted by cyberattacks

January 31, 2019
Airbus says no commercial operations were impacted

European aerospace and defence group Airbus has launched an inquiry into the origin and targets of a cyberattack detected earlier in January, the same month that French IT consulting group Altran also saw attempts to breach its systems.

An Airbus spokesman said Thursday that the attack was detected on January 6 and that on some European personnel was targeted starting January 10, prompting it to inform France's data regulator CNIL the following day.

Under the EU's strict new General Data Protection Regulation (GDPR) enacted last year, companies must inform regulators within 72 hours if such put personal data at risk.

The Airbus inquiry is still underway to determine who was behind the attack, which focussed on the IT systems of its commercial aircraft division, the spokesman said.

The group said no commercial operations were impacted by the breach, and that attackers appeared to be seeking contact and IT identification details of some of its 130,000 employees.

The inquiry also aims to determine if specific data was being targeted at a key player in Europe's defence and security industries.

Airbus is a major supplier of military jets and weapons as well as communication and navigation satellites to European nations, generating revenue of 59 billion euros ($68 billion) in 2017.

It also provides cybersecurity services for essential government networks and infrastructure.

Security experts said Altran was targeted by a ransomware attack
Infection risks

Altran Technologies, one of the largest IT consulting firms in Europe, announced Monday that it had detected on January 24th an attack that impacted its operations on the continent.

But unlike the Airbus attack, the hackers did not appear to be seeking personal data but rather access to files in "many European countries, including France."

Although Altran said it had not detected any cases of stolen data, it had to shut down its IT networks "to protect our clients, employees and partners."

Security experts said Altran was targeted by a ransomware attack, which usually attempts to lock a person or company out of key data, or threaten to publish the private data, unless a payment is made.

And because modern companies share network services across several sites, "the files on central servers can be infected quite quickly," said Ivan Fontarensky, head of cyberdefence at the French defence and electronics group Thales.

Altran has brought in outside experts to help determine the origin and extent of the attack, and said that so far it "has not identified any stolen data, nor instances of a propagation of the incident to our clients."

The company's clients operate in a wide range of sectors including defence, energy and infrastructure industries—and like Airbus, it also offers cybersecurity services.

The EU moved to require companies to inform regulators of personal data breaches after accusing several high-profile companies of failing to inform users that passwords or personal data had been compromised by hackers.

Experts say such disclosures are bound to increase in coming years as the digital economy takes hold in more countries and sectors.

Explore further: Airbus sells 65 jets to SMBC Aviation Capital

Related Stories

Airbus sells 65 jets to SMBC Aviation Capital

January 21, 2019

Aircraft leasing company SMBC Aviation Capital has finalised an order for 65 Airbus planes from the A320neo family with a catalogue price of $7.47 billion (6.6 billion euros), Airbus said Monday.

France fines Uber 400,000 euros over huge data breach

December 20, 2018

France's data protection agency said Thursday that it had fined the US ride-hailing group Uber 400,000 euros ($460,000) over a 2016 data breach that exposed the personal data of some 57 million clients and drivers worldwide.

France's Orange hit by hackers data raid

May 7, 2014

Hackers have stolen the personal data of 1.3 million customers of French telephone company Orange, in the second major breach of its kind in a matter of months.

Irish data authority probes Facebook photo breach

December 15, 2018

The Irish data watchdog on Friday launched an investigation into Facebook, after the social media titan admitted a "bug" may have exposed unposted photos from up to 6.8 million users.

Recommended for you

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.