SAS

The organisation operates in the aviation sector, specifically as a Scandinavian airline. Its core services involve providing passenger air travel. The airline maintains a digital presence through a dedicated mobile application and website, which are critical platforms for customer interaction and service delivery. These platforms facilitate functions like flight bookings, account management, and operational information for travellers primarily within the Scandinavian region and its international routes.

A significant cybersecurity incident impacted the organisation on February 14, 2023. Attackers compromised the airline's mobile application and disrupted its website functionality. This breach resulted in unauthorised access to customer data, where users attempting to log in could view personal details belonging to other customer accounts. The attack caused extended operational disruptions, significantly affecting services. In response, the organisation actively urged customers to refrain from using the compromised mobile application while remediation efforts were underway. Security personnel investigating the incident noted its occurrence coincided with other cyber attacks targeting entities in the region, although a definitive attribution linking those incidents to this specific airline breach remained unconfirmed. The organisation successfully addressed the technical vulnerabilities exploited in this attack.