Aviation · 2024
OMA: 13 airports operated on backup systems
Thirteen airports running on backup systems.
What happened
On October 18, 2024, OMA disclosed unauthorized access to information systems supporting 13 Mexican airports. Airport operations continued through alternate and backup procedures while external specialists investigated and restored systems. OMA later confirmed that ransomware encrypted some files and systems and that information concerning employees, suppliers and commercial customers had been taken.
OMA restored systems from backups and said it did not pay a ransom. RansomHub claimed responsibility, advertised more than 3 TB of stolen material and later published part of its dataset. OMA confirmed that information related to employees, suppliers and commercial customers had been exfiltrated. The case shows two sides of resilience: backup procedures kept airports operating, while weak access controls still allowed ransomware and data theft inside the shared environment.
What would have changed it
OMA's continuity measures kept the visible operation moving, but personal data still left the environment. We connect recovery planning with access control, monitoring and Mexican data-protection obligations.