Dublin Airport supplier cyberattack may affect millions of passengers

A cyberattack on a third-party supplier serving Dublin Airport Authority (DAA) and Cork Airport may have compromised the personal data of millions of travelers. The Dublin Airport supplier cyberattack appears to have exposed files containing passenger and boarding information from flights during August 2025.

While DAA confirmed that its own systems were not breached, the supplier’s compromised server may have stored sensitive details linked to flight operations. Because Dublin Airport handles over 100,000 passengers daily, security experts warn that the potential exposure could affect millions.

What information may have been stolen

According to airline partner SAS, the leaked data may include passenger names, booking references, frequent flyer details, travel itineraries, and contact information. Although payment data and passports were not confirmed as compromised, investigators have not ruled out further exposure.

The supplier’s files reportedly appeared on a dark web forum in mid-October, suggesting a financially motivated cybercriminal group carried out the attack. Investigators believe the stolen data could be used for targeted phishing, identity theft, or social engineering scams.

Supply-chain vulnerabilities under scrutiny

The Dublin Airport supplier cyberattack highlights how third-party vendors often represent weak points in aviation cybersecurity. Even though airports invest heavily in their internal systems, supplier networks frequently handle large volumes of unencrypted data.

Similar incidents have recently hit the aviation industry. For example, a ransomware attack on Collins Aerospace disrupted multiple European airports earlier this year. These patterns reveal how cybercriminals exploit interconnected systems that lack unified security oversight.

Passenger impact and official response

DAA stated that no internal operations or airport systems were affected. However, passengers who traveled through Dublin or Cork Airport between August 1 and 31 are urged to stay alert. Experts recommend monitoring for suspicious emails, booking changes, or fraudulent travel communications.

The Data Protection Commission (DPC), the Irish Aviation Authority, and Ireland’s National Cyber Security Centre have launched a joint investigation. DAA says it continues to work with authorities to determine how the supplier breach occurred and what data was accessed.

Preventing future supplier-related breaches

Cybersecurity specialists recommend that airports and airlines:

• Conduct frequent audits of third-party vendors.
• Encrypt all stored passenger data.
• Restrict access to sensitive systems and enforce multifactor authentication.
• Require suppliers to notify clients immediately after any detected intrusion.

Conclusion

The Dublin Airport supplier cyberattack demonstrates how breaches at external vendors can endanger millions of passengers, even when primary systems remain intact. As the aviation sector grows increasingly digital, supply-chain security must become a core focus. Strengthening oversight and enforcing shared cybersecurity standards will be vital to protecting both airports and travelers in the years ahead.