EgyptAir Denies Reports of Alleged Data Breach Involving Employee Records

EgyptAir, Egypt’s state-owned flag carrier, has been linked to an alleged cybersecurity incident after claims surfaced that internal databases were being offered for sale on a cybercrime Forum, Dailydarkweb reported. 

According to the claims, an unauthorized actor is marketing a dataset purportedly containing more than 104,000 records, including sensitive human resources information and internal operational documents. The data is reportedly being offered for sale at a starting price of $300 in the cryptocurrency Monero (XMR). 

The seller alleges that the leaked material includes CSV files extracted from EgyptAir’s human resources and user management systems, with filenames suggesting HR personal data and user account records.

The purportedly compromised information is said to include personal identification details such as national identification numbers, full names in both Arabic and English, and dates of birth. It also allegedly contains contact information, including residential addresses, mobile and home phone numbers, and personal email accounts.

In addition, the dataset is claimed to include user credentials, such as internal user IDs, corporate email addresses ending in “@egyptair.com,” and passwords. Human resources and recruitment-related data allegedly present in the files includes job application outcomes, interview schedules, internal HR notes, and applicant status updates.

The seller further claims that the leaked material contains internal operational documents, including fuel dockets related to freighter flights, as well as PDF files and video attachments exchanged through staff email communications.

The authenticity of the data and the extent of any potential breach have not been independently verified, and no official confirmation has been issued regarding the alleged compromise.