Executive Jet Support data allegedly leaked by datacarry group

• Ransomware group: datacarry
• Country: United Kingdom
• Sector: Transportation
• Announcement date: May 26, 2025

Data breach claim against Executive Jet Support

The datacarry ransomware group has released an announcement on its dedicated leak site claiming that it has successfully compromised and published data belonging to Executive Jet Support. According to the claims made by the threat actor, the breach involves the exfiltration of information from the organization's network. This announcement, which appeared on the group's leak site on May 26, 2025, marks a significant development in the ongoing threat landscape facing the aviation services sector.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive information during the initial stages of the intrusion. By threatening to publish this stolen data on public forums or specialized leak sites, the attackers aim to maximize their leverage during ransom negotiations, using the threat of reputational damage and regulatory scrutiny as a primary motivator.

Details of the alleged incident

The claims made by the datacarry group suggest that the intrusion was successful in gaining unauthorized access to the organization's internal network. The group asserts that once access was established, data was exfiltrated from the environment. While the group has officially announced the breach, they have not provided specific details regarding the timeline of the initial access, although the claim suggests the event may have occurred as early as January 30, 2025.

Regarding the specific content of the breach, the listing names no data types. No information has been provided regarding the nature of the allegedly leaked data, and no screenshots have been made available to verify the contents of the breach. Furthermore, there is no information available regarding the total volume of data stolen or the specific amount of a ransom demand.

About Executive Jet Support

Executive Jet Support is an aviation company based in the United Kingdom. The firm provides a specialized range of services tailored to the private aviation industry, including parts supply, logistics, and maintenance support. As an organization operating within the global aviation sector, Executive Jet Support offers spare parts management and technical support services to various aircraft operators on a worldwide scale.

Impact and potential risks

This incident may pose significant risks to the organization's operational continuity and could potentially damage customer trust. Depending on the actual content of the leaked data, the organization may face legal obligations and administrative fines under the UK GDPR (General Data Protection Regulation). If the stolen data is shared with third parties, secondary risks such as identity theft or targeted phishing attacks against employees and customers may occur.

In the aviation and logistics sector, maintaining data integrity and confidentiality is critical for operational safety and client relationships. Organizations in this sector can mitigate such risks by implementing robust defensive measures, such as multi-factor authentication, network segmentation, and continuous monitoring of data egress to detect unauthorized exfiltration. Because public information regarding the datacarry group is limited, it is currently not possible to make a definitive assessment regarding the group's specific methods or their underlying motivations.

General defensive considerations

To defend against the types of attacks claimed by groups like datacarry, organizations typically focus on hardening their perimeter and improving internal visibility. This includes regular patching of vulnerabilities, implementing strict access controls, and conducting regular security awareness training to prevent initial access through common vectors like phishing. As ransomware groups continue to evolve, maintaining a comprehensive incident response plan is essential for managing the legal and operational consequences of a potential data breach.