On September 6, 2023, Sabre Corporation (“Sabre”) confirmed that the company was targeted in a cyberattack. A representative for Sabre also added that “Sabre is aware of the claims of a data exfiltration made by the threat group, and we are currently investigating to determine their validity.” If Sabre’s pending investigation confirms that confidential consumer information was leaked, Sabre will be required to send out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you receive a notification from Sabre Corporation explaining that your information was leaked as a result of a cyberattack, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the potential Sabre data breach. For more information, please see our recent piece on the topic here.
More About the Cyberattack Against Sabre
The cyberattack targeting Sabre was only recently disclosed, and more information is expected in the near future as the company completes its investigation. However, a Sabre representative spoke with TechCrunch, and a recently published TechCrunch article provides some important information about the incident.
According to this source, the Dunghill Leak group recently took credit for a Sabre data breach on the group’s dark web leak site. The hackers claim to have obtained 1.3 TB of data, including databases on ticket sales and passenger turnover, employees’ personal data and corporate financial information. While Dunghill Leak hasn’t yet made the information public, nor has it posted a proof pack, the group indicates that the full cache of data will be made “available soon.”
That said, screenshots shared with TechCrunch indicate that some of the databases contained booking details and billing details containing tens of millions of records. However, this doesn’t necessarily mean that Dunghill Leak was able to access the entire database.
If Sabre confirms that confidential consumer data was leaked as a result of the cyberattack, the company will almost certainly send out data breach letters to all affected parties. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About Sabre Corporation
Founded in 1960, Sabre Corporation is a software and technology company based in Southlake, Texas. Sabre exclusively serves the travel industry, developing technology used in mobile apps, airport check-in kiosks, online travel sites, airline and hotel reservation networks, travel agent terminals, and other travel-related applications and services. Sabre employs more than 6,000 people and generates approximately $1.9 billion in annual revenue.
