LockBit group claims major ransomware attack on Mexico City's Querétaro Intercontinental Airport

The infamous LockBit ransomware group claims that it targeted one of the busiest airports in Mexico and will leak the stolen data online unless airport authorities pay a ransom.

Recently, the Querétaro Intercontinental Airport near Mexico City said that it suffered a cyber security incident on October 30 and launched an internal investigation to understand the nature and scope of the incident.

“We reported that we had a cyber attack incident and are working with experts to address this situation. The AIQ systems are operating normally. The safety of our passengers and operations remains our top priority,” the airport said in a post on X.

 

Airport officials later said that the security incident did not affect the “operational security of the airport” and that its infrastructure was operating normally.

“It should be noted that the cyber security team and experts have acted with the greatest diligence, applying containment and isolation measures; Likewise, due to the nature of the organisation, all the information that this parastatal has is in the public domain,” the authorities added.

The notorious LockBit ransomware group says it was behind the cyber attack on the Querétaro Intercontinental Airport and has listed the airport as a victim on its data leak site. The group has given the airport a deadline of November 27 to pay a ransom, failing which it will publish the stolen data.

 

This news comes within days of the ransomware group victimising US global aerospace giant Boeing and listing the company on its data leak site. The group claimed to be in possession of “tremendous amounts of sensitive data” allegedly stolen from the company and gave a deadline for five days.

In March, the ransomware group also claimed that it infiltrated the internal network of Maximum Industries and stole sensitive files belonging to Elon Musk’s private aerospace company SpaceX.

In a post, the LockBit ransomware group listed Maximum Industries as a victim on its data leak site and claimed to have stolen roughly 3,000 “drawings certified by space-x engineers”. The group said Maximum Industries offers certain services to SpaceX.

“I would say we were lucky if SpaceX contractors were more talkative. But I think this material will find its buyer as soon as possible,” Lockbit said in a post on its dark web portal.

“Elon Musk, we will help you sell your drawing to other manufacturers — build the ship faster and fly away," the group added.