Wizz Air
stormousThis record tracks a ransomware attack claimed by the stormous group against Wizz Air. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
The response stated: "Wizz Air has strong security systems in place, designed to protect the sensitive data of our valued customers and partners." But I would like to know what guarantees you actually offer your customers and others, because this company clearly seems unaware of what’s going on. The breach was published nearly a month ago, and the data has been widely circulated and used. It has also been verified, and it is indeed valid data linked to your employees. Does the company not have any monitoring system? Or perhaps there have been numerous reports of major fraud incidents committed under your name. So, your denial of the breach — which dates back to a month ago — appears more like an attempt to mislead your customers and partners.
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.