Cyberattack on Dublin Airport supplier could’ve affected millions customers

A data breach at a third-party supplier, used by Dublin and Cork Airports, may have compromised the personal information of millions of customers.

Although the exact number of affected customers is not yet clear, The Irish Times has learned that it could be “millions”.

Airport operator DAA, which operates Dublin and Cork Airports, learned that boarding pass information for flights departing Dublin Airport from 1st to 31st August 2025, contained in one of the files on the compromised IT server, may have been published online by a “cybercriminal group”.

They added that while “passengers who travelled in August do not need to take any immediate action, [they] should remain alert to any unusual activity related to their bookings”.

An email from Swedish airline SAS further elaborated: “We were recently informed by Dublin Airport that an unauthorised party gained access to certain passenger data related to flights departing from the airport during that period. This means that your booking details may be among the information that was affected.”

They added that the details included passenger booking reference, first name, last name, and Frequent Flyer Number, as well as possibly other related data, such as contact information and travel itinerary. SAS said it is working with Dublin Airport to manage the situation and has informed the Swedish Authority for Privacy Protection.

The initial report was made to the Data Protection Commission (DPC) on Friday, 19th September, following the news of the compromise at Collins Aerospace.

A spokesman for DAA told the Irish Times that it is working with the Irish Aviation Authority, the DPC, the National Cyber Security Centre, and affected airline partners.

"At this time, there is no evidence of any direct impact on daa systems,” the spokesperson said.

Dublin Airport handles over 100,000 passengers daily, with peak days exceeding 120,000. In 2024, a total of 33.3 million passengers went through Dublin Airport's terminals.

In September, European airports faced major disruption following a cyberattack on check-in and boarding software developed by Collins Aerospace.