Storm Ransomware Hits US Aerospace Supplier

A US-based aerospace supplier to Boeing and Airbus has been targeted by the Storm ransomware gang, which claims to have stolen sensitive documents. Star Aviation Inc., based in Kentucky, provides wire harness inspection and repair services for commercial aircraft. The attackers released screenshots of technical schematics and employee ID cards as evidence of their claim.

The leaked data could pose a significant risk to aviation organizations if exploited by hackers. The exposed schematics may give attackers valuable information about aircraft systems, while the ID cards put employees at risk of fraud and targeted social engineering attacks.

Storm ransomware has claimed around 44-48 victims since its emergence in August, mostly in the US across various sectors. Its victims include healthcare, financial services, manufacturing, technology, transportation, and government organizations.