Pacific Airlines listed on coinbasecartel leak site

• Ransomware group: coinbasecartel
• Country: Vietnam
• Sector: Transportation
• Announcement date: January 29, 2026

Pacific Airlines listed on coinbasecartel leak site

The Vietnam-based airline Pacific Airlines has been listed on the leak site of the group known as coinbasecartel. On January 29, 2026, the group announced the inclusion of the airline on its platform, claiming to have compromised the company's data. This announcement specifically references the operational details of the airline.

Details of the claimed attack

The incident involves a claim made by the coinbasecartel group, which posted the organization's details on its dedicated leak site. According to the announcement, the group claims to have successfully compromised the data belonging to Pacific Airlines. While the listing appeared on January 29, 2026, the specific circumstances surrounding the initial intrusion have not been detailed in the public announcement.

Ransomware groups often utilize leak sites as a component of a double extortion strategy. In such scenarios, attackers do not only encrypt an organization's systems to disrupt operations but also steal sensitive information. The threat of leaking this data on a public platform is used to pressure the victim into paying a ransom. These sites serve as a public shaming mechanism, increasing the pressure on the targeted entity to comply with demands to prevent the exposure of proprietary or personal information.

Data involvement

Regarding the specific contents of the alleged breach, the available information remains limited. The screenshot provided by the group does not provide specific information regarding the type of data allegedly leaked; it states 'No disclosed information available yet'.

About Pacific Airlines

Pacific Airlines is a low-cost airline based in Vietnam. It operates primarily out of Tan Son Nhat International Airport and was formerly known as Jetstar Pacific.

Risk assessment and industry implications

This incident suggests that corporate or passenger data within Pacific Airlines may be at risk. As an entity operating in the airline sector, a potential breach could involve the exposure of passenger personal information and operational data. Such an event may lead to reputational damage for the company and potential investigations under data protection regulations in Vietnam. Furthermore, leaked data could be utilized for secondary attacks or targeted phishing campaigns.

Public information about the coinbasecartel group is limited, making it difficult to determine the full scope of their typical operations or their specific motivations. In the aviation industry, where the handling of vast amounts of sensitive passenger information is standard, the threat of data exposure is a significant concern for both operators and travelers.

For organizations operating in high-stakes sectors like transportation, maintaining robust cybersecurity postures is essential. Common defensive steps for organizations include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular employee training to recognize phishing attempts. Additionally, network segmentation and comprehensive logging can help in detecting and containing potential intrusions before they escalate into full-scale data exfiltration events. As seen in this case, even when specific data types are not immediately disclosed, the mere claim of a breach can trigger significant operational and regulatory concerns for a globalized industry.