Summary
Written by ThreatCluster from file listing, victim profile, leak post, screenshot, ransom noteEverest claims Emirates Flight Catering’s archive contains 24 GB of data across 13,823 files. The group describes the data as including business and operational materials, Kronos/workforce-management materials, IT/cybersecurity and access governance, non-airline billing and Aladdin databases, and retail, POS and expo-operations files. Sample filenames published include Aladdin_V4.01_Fly Dubai.accdb and Aladdin_V9.01_other Airline.accdb. The leak page identifies Emirates Flight Catering (emiratesflightcatering.com) as the victim, lists Kronos and Aladdin as platforms, notes the publication status as published, and states the ransom note that files will be published after a countdown with an invitation to contact the group.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- Kronos Aladdin
What was taken
The Emirates Flight Catering archive contains 13,823 detailed file records with 24 GB data. The archive is organized around Emirates / Emirates Flight Catering corporate communication, EKFC HUB materials, business-continuity records, emergency-contact files, IT and cybersecurity documentation, enterprise-architecture procurement, non-airline billing, Aladdin Access databases, customer-creation documents, retail and POS repositories, Expo outlet setup, stock-management folders, catering and event-planning packages, branding and agency-procurement materials, DEWAN agency recruitment files, staff records, media exports and operational working files. The file composition includes 6,576 PDF files, 1,982 JPG files, 1,540 LCK files, 938 XLSX files, 674 DOCX files, 588 DOC files, 479 MSG email files, 244 DWG files, 186 PNG files, 128 XLS files, 120 JPEG files, 83 PPTX files, 59 TXT files, 44 HTM files, 32 MP4 files, 23 XLSM files, 14 DB files, 10 TIF files, 9 LOG files, 8 MOV files, 6 EML files and other business, technical, media, database and operational formats.
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.