Dark Web Informer — Cyber Threat Intelligence
Threat Actor Claims Air France Vulnerability Exposes 2 Million Customer Records via Admin Panel
France
Quick Facts
Date & Time
2026-02-06 04:59:51 UTC
Threat Actor
GordonFreeman
Victim Country
FranceIndustry
Airlines & Aviation
Victim Organization
Air France
Victim Site
Category
Data Breach
Severity
🟡 Medium
Network
Open Web
Victim Profile
Air France
Major international airline and flag carrier of France Organization
Air France
Sector Type
Private
Industry
Airlines & Aviation
Country
France Domain
Claimed Records
~2 Million
Description
Air France is a major international airline and the flag carrier of France, headquartered in Tremblay-en-France. Part of the Air France–KLM group, it is one of the founding members of the SkyTeam global airline alliance. The company operates the Flying Blue frequent flyer program, which is referenced in the exposed data samples.
Incident Overview
A threat actor using the handle "GordonFreeman" has posted a listing claiming to sell access to a vulnerability in Air France's systems, along with a data extraction method. The listing states that the vulnerability provides access to an admin panel through which over 2 million user purchase records can be obtained.
