Ukrainian hackers claimed responsibility for the attack, which resulted in dozens of flights being cancelled on Monday.
The group Silent Crow, a Ukrainian hacker group, claims that it, along with the Belarusian Cyberpartisans hacker group, is responsible for the attack on Aeroflot. The group allegedly destroyed 7,000 of the airline’s servers.
Aeroflot itself long called it an “ICT malfunction,” but Russian prosecutors have since confirmed the hack and announced a criminal investigation. On Monday, 54 return flights were cancelled due to the attack.
Another 206 flights were able to operate. Flights are also being cancelled today. It’s not immediately clear how long the problems will persist.
The Silent Crow group claims to have obtained Aeroflot data during the attack and to have controlled employee computers, including those of senior management. Silent Crow previously attacked a Russian real estate database, a Russian telecom company, and the Russian branch of automaker Kia.