A hacker obtained information from Delta Air Lines’ internal employee directory from a third party recently. The company says no sensitive employee information was leaked. The data included things like names, contact information and office location but no personal data.
This was part of a larger hack into employee directories at companies such as Schwab, McDonalds and the University of Georgia, according to a blog by Hudson Rock, a cybercrime intelligence firm. All were a part of the MOVEit file transfer software which realized a vulnerability allowed the data breaches to occur last year.
The data leaked included 57,000 records from Delta – the company employs around 100,000 people.
A message from the hacker about the data implied the intent was to “make organizations aware of the potential threats and weaknesses in their systems, while also publicizing the data for malicious actor who may use it,” the Hudson Rock blog stated.