Bristol Airport Admits Cyber Attack Impacted Flight Display Screens
Ransomware attack took down flight display screens for two days, Bristol Airport admits
A British airport has admitted that a cyber attack took down its flight display screens for two days last week.
Bristol Airport said that information screens were taken offline early on Friday, as the airport sought to contain ransomware-like attack.
On Sunday the airport said that the displays were back up and working in key locations (in the departures and arrivals halls), but that work is continuing to get the whole site back online.
A spokesman for Bristol Airport told the BBC that no ransom had been paid to get the systems back up and working again.
“We believe there was an online attempt to target part of our administrative systems and that required us to take a number of applications offline as a precautionary measure, including the one that provides our data for flight information screens,” spokesman James Gore told the BBC.
“That was done to contain the problem and avoid any further impact on more critical systems.
The spokesman said that the airport had resorted to using whiteboards and marker pens instead of the overhead display screens. No flights were apparently disrupted as a result.
“The indications are that this was a speculative attempt rather than targeted attack on Bristol Airport,” the spokesman reportedly said. “At no point were any safety or security systems impacted or put at risk.”
“Given the number of safety and security critical systems operating at an airport, we wanted to make sure that the issue with the flight information application that experienced the problem was absolutely resolved before it was put back online,” he reportedly added.
At least one security expert had said that the airport’s lack of information about the ‘speculative’ attack suggested it was unable to deal with an unsophisticated attack.
“Bristol Airport have not released any detail about the method of attack, however they have stated that they think the attack is speculative rather than targeting, which suggests an unsophisticated attack,” said Andy Norton, director of threat intelligence at Lastline.
“That in itself is worrying that airport defences were not capable of stopping a simple attack, or the attack that required taking down the arrival and departure screens, is a distraction to a larger attack,” he added.
Earlier this month Gatwick airport had issues with their display screens. Gatwick blamed its screen outage on an “IT issue” with its IT provider Vodafone.
Last year passengers at a number of airports including Gatwick, Paris Charles de Gaulle and Melbourne among others were delayed due to a networking fault with a passenger management system called Amadeus Altea.
- ISO27001 Information Security Consultant
- Up to £60,000
Information Security Consultant with ISO27001 audit and advisory experience is needed for a client facing opportunity with a Cyber Security company in London. Experience with ISO27001 is essential. Activities of the role will include, but not be limited to providing advice to clients, Gap analysis, Risk assessment, analysis, ISO27001 Audits. Experience taking a client through to iso 27001 certification is highly desirable. This Cybersecurity consultancy, who are dedicated to improving and investing in their client's businesses and employees careers, are looking for a security consultant due to expansion. All the training and development will be provided to help them specialise into the PCI industry / Security advisory industry. Ideal certifications ISO27001 Lead Auditor, ISO 27001 Lead implementer, PCI ISA. Aspiring PCI QSA. Other certifications such as CISSP, CISM or CISA are beneficial to have but not required. The ability to SC Clearance is essential. MUST be UK based and realistically able to commute to London. Structured career path, technical training, diverse and interesting clients available. (ISO70001 Lead Auditor, ISO 27001 Lead implementer, PCI ISA. Aspiring PCI QSA, ISO27001 Information Security Consultant) Contact me on firstname.lastname@example.org or 07884666351 or 02086634030 Ref: CH7514
- Google Cloud Data Engineer
- Up to £650 Per Day
Google Cloud Data Engineer London Up to £650 Per Day Duration: 3 months (Potential to extend) We are currently working with a leading Google Cloud partner who are currently looking for a Google Cloud Data Engineer in London. The Google Cloud Data Engineer will be responsible for a new, on-site project (start to finish) designing and implementing a data cataloguing platform using Google Cloud. Current Experience Required Google Cloud Data Analytics (Data Engineering, Data Mining, Data Cataloguing etc.) Cloud PUB / SUB Ref: PG7512
- Professional Services Security Engineer
- United Kingdom
Professional Services Security Engineer with current checkpoint experience is needed for the UK focused client facing implementation/migration, configuration position. The role will be utilising the latest versions of Checkpoint, so someone accredited with either CCSA or CCSE, on at least version R80 is ideal. The Professional Services Security Engineer must have current technical implementation experience using Checkpoint, however, I would look at someone with strong firewalling experience around other vendors such as Palo Alto and Fortinet. Being a multi-vendor professional services business, there is scope for this person to receive training and experience within other vendors. This is a UK wide role, the company in question has 2 offices across the UK, however, there is scope for this person to be home based when not on client site. Vendor training and exposure actively promoted.
- eDiscovery / Forensic Consultant, London, £65,000
Senior eDiscovery / forensic consultant needed to join a business is recognised for helping top tier clients across eDiscovery, Forensics, Incident Response, Advisory etc. Known the for quality, consistency of work throughout the world. This individual MUST be London based, client facing with deep technical hands on experience with eDiscovery / forensic tools, techniques and best practice. Hands on experience using Relativity is essential. The position is split between engaging with client stakeholders to provide consultancy, technical engaging to identify, preserve, collect, process, review and produce electronically stored information in litigation and manage / provide support for the other internal business functions. This will include, but not be limited to; manging client engagements, collecting / processing data within Relativity, delivering / providing guidance customisation on reports, advising clients. Any of the following certifications are highly desirable. • Relativity Certified Administrator (RCA) • Relativity Processing Specialist • Relativity Analytics Specialist Travel to client site will be involved. Fluency in multiple European languages is highly desirable. All details kept in the strictest of confidence. Contact me on Chris.email@example.com 07884666351 or 02086634030