Mexico
MEX
OMA confirms ransomware; operations on backup systems
On 18/10/2024, GRUPO AEROPORTUARIO DEL CENTRO NORTE disclosed a cybersecurity incident and shifted to alternate and backup systems. On 05/11/2024, OMA confirmed ransomware had encrypted some files and systems and that certain information related to customers, suppliers, and employees was exfiltrated; airport operations continued. Reporting linked the attack to the RANSOMHUB group.
35
Estimated severity
35 / 100
90
Source reliability
90 / 100
Approximate Date
18/10/2024
Targeted Company
GRUPO AEROPORTUARIO DEL CENTRO NORTE
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Mexico
Affected countries
Mexico
Impacted regions
National · Mexico
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
ERP or business system disruptionService degradation
Affected sectors
Transportation
Affected departments
Information Technology
Attack Profile
Attack types
RansomwareData exfiltrationUnauthorized access
Attributed threat actors
RANSOMHUB
Sources
Incident Sources
news.oma.aerohttps://news.oma.aero/news/oma-provides-additional-information-on-cybersecurity-incident-c4494-f8d04.htmltherecord.mediahttps://therecord.media/ransomhub-gang-behind-attack-mexican-airport-operatorscworld.comhttps://www.scworld.com/brief/mexican-airport-operator-purportedly-breached-by-ransomhubresearch.checkpoint.comhttps://research.checkpoint.com/2024/28th-october-threat-intelligence-report