DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Malware attack on Radixx Res disrupts 20 airlines’ ticket reservation systems

Posted on April 24, 2021 by chum1ng0

Radixx, a subsidiary of Sabre Corporation, provides an air passenger ticket reservation system for low-cost airline carriers. On April 22, Radixx announced that Radixx Res™ had experienced a malware incident on April 20 that impacted its reservation system. The incident reportedly did not impact Sabre systems, and the customer database was not compromised. The incident did impact the ability of 20 customer airlines to book reservations, however, and Radixx hoped to restore services by the end of April 22.

Despite their best efforts, however, systems were still impacted, and on April 23, Radixx provided an update:

We want to further update you on Radixx’s recent incident as part of our ongoing communication efforts and the following information is subject to update.

We are starting to recover service to our customers and our teams are coordinating with customers throughout that process. In parallel, we will continue to provide support to our customers with their manual operations. We understand the urgency of the situation and are working to resolve the issue as quickly as possible. We regret the disruption this is causing.

Some of the airlines affected included Peach Aviation and ZIPAIR in Japan, as well as Air Belgium, Sky Airlines in Chile, Air Transat in Canada, Vietravel in Vietnam, Aero K Airlines in South Korea, Salam Air in Oman, FlySafair in South Africa, Air India Express, and Wingo in Colombia.

The service interruption made it imposible for many of the airlines’ passengers to make, change, delete, or confirm bookings through the airlines’ web sites, although flight operations were not affected. In some cases, like the Air India Express notice below, passengers were informed that they could call the airlines to handle their reservation needs.

Air India Express Notice
Screen capture by @Chum1ng0 for DataBreaches.net

In other cases, passengers were informed that if they needed to cancel a flight but couldn’t because of the service disruption, the airlines would give them a flight credit or some other arrangement to compensate them.

On some level, the service interruption may be the most serious for one of two start-up low-cost airlines. Avelo Airlines had just launched on April 8 and has its first flights scheduled for April 28.

As of the time of publication, airlines sites still carry the apology message and service appears to still be disrupted.


Reporting by Chum1ng0; edited by Dissent.


Related:

  • Two more entities have folded after ransomware attacks
  • British institutions to be banned from paying ransoms to Russian hackers
  • Michigan ‘ATM jackpotting’: Florida men allegedly forced machines to dispense $107K
  • Authorities released free decryptor for Phobos and 8base ransomware
  • Missouri Adopts New Data Breach Notice Law
  • Qantas obtains injunction to prevent hacked data’s release
Category: Business SectorMalwareU.S.

Post navigation

← CO: Peak Vista Community Health patient information on stolen computers
School Nutrition Vendor Sued for Compromise of 867,209 K-12 Student Records →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
  • Hacker group “Silent Crow” claims responsibility for cyberattack on Russia’s Aeroflot
  • AIIMS ORBO Portal Vulnerability Exposing Sensitive Organ Donor Data Discovered by Researcher
  • Two Data Breaches in Three Years: McKenzie Health
  • Scattered Spider is running a VMware ESXi hacking spree
  • BreachForums — the one that went offline in April — reappears with a new founder/owner
  • Fans React After NASCAR Confirms Ransomware Breach
  • Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack (1)
  • Infinite Services notifying employees and patients of limited ransomware attack
  • The safe place for women to talk wasn’t so safe: hackers leak 13,000 user photos and IDs from the Tea app

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • White House ordered to restore Medicaid funding to Planned Parenthood clinics
  • California Attorney General Announces $1.55M CCPA Settlement with Healthline.com
  • Canada’s Bill C-2 Opens the Floodgates to U.S. Surveillance
  • Wiretap Suits Pit Old Privacy Laws Against New AI Technology
  • Action against tiny Scottish charity sparks huge ICO row
  • Congress tries to outlaw AI that jacks up prices based on what it knows about you
  • Microsoft’s controversial Recall feature is now blocked by Brave and AdGuard

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.