Breach taxonomy
Summary
On May 5, 2025, Global Crossing Airlines Group identified unauthorized activity within its computer networks and systems supporting portions of business applications, determined to be a cybersecurity incident. The company activated incident response protocols, engaged third-party cybersecurity experts, isolated affected servers, and notified law enforcement. Operations were not disrupted and the company did not expect material impact. Filed under Item 8.01; materiality not yet determined as of filing date.
Tagging rationale
ThreatUnknown
Filing does not attribute the incident to a specific actor -> UNKNOWN.
MethodsMalware
Filing describes 'unauthorized activity within its computer networks and systems' requiring containment and server isolation; no specific method confirmed -> MALWARE (general).
AssetsProduct Service
Unauthorized activity affected business application systems supporting airline operations; flights were unaffected -> PRODUCT-SERVICE.
EffectsNetwork Security
No operational disruption; only confirmed impact is the security compromise of network/systems -> NETWORK-SECURITY.
Impact
No operational disruption, no data exposure confirmed, no material impact expected, small regional airline -> score 1.
InsuranceNot disclosed
Filing makes no mention of insurance -> null.
Read the original SEC filing excerpt
Item 8.01 Other Events Discovery of and Response to Cybersecurity Incident On May 5, 2025, Global Crossing Airlines Group Inc. learned of unauthorized activity within its computer networks and systems supporting portions of its business applications, which the Company determined to be the result of a cybersecurity incident. Upon learning of this activity, the Company immediately (1) activated its incident response protocols and third-party cybersecurity experts to assist with containment and mitigation activities and to investigate the nature and scope of the incident and (2) took actions to contain and isolate the affected servers and prevent further intrusion. The Company also promptly notified law enforcement and is coordinating fully with them. Given the recency of the incident, our investigation and response are ongoing, and the full scope, nature, and potential ultimate impact on the Company are not yet known. The Company currently believes that none of its operations have been disrupted or negatively impacted by this incident. Although the Company is unable to predict the full impact of this incident, the Company does not expect the incident will have a material effect on the Company, or its financial condition or results of operations.