Security Experts:

Connect with us

Hi, what are you looking for?



Flight Tracker Flightradar24 Hit by Data Breach

Flightradar24 hacked

Flightradar24 hacked

Flightradar24, a highly popular flight tracking service based in Sweden, has instructed some users to change their passwords after detecting a breach on one of the company’s servers.

Earlier this week, some Flightradar24 users started receiving emails alerting them of a security breach in which email addresses and password hashes associated with accounts registered prior to March 16, 2016, may have been compromised.

Some of the individuals who received the notification complained that the emails looked like phishing attempts, especially since the company had not mentioned the incident on its website or social media channels. It has however confirmed to users who inquired via social media and the company’s forum that the emails are legitimate.

In response to posts on the forum, a company representative highlighted that no personal information was compromised, and noted that payment information is not stored on its systems.

Flightradar24 said it was confident that the incident had been contained after the targeted server was “promptly” shut down after the intrusion was detected.

The company did not specify which hashing algorithm was used for the exposed passwords, but noted that the compromised system had been retired and used an older algorithm that allows for the hashes to be cracked. Affected users’ passwords have been reset as a result. The flight tracker says it has been using a more secure hashing algorithm since 2016.

The company has not said how many users are impacted – it’s notification only mentions that the incident affects a “small subset of Flightradar24 users.” However, considering that the service is said to have more than 40 million users per month and its mobile applications are among the most installed apps on Google Play and the Apple App Store, even a “small subset” could be a significant number.

FlightRadar24 says it has notified the Swedish Data Protection Authority in order to comply with the EU’s General Data Protection Regulation (GDPR).

Related: Orbitz Data Breach Impacts 880,000 Payment Cards

Related: Major Canadian Banks Investigating Data Breach Claims

Related: HR Software Firm PageUp Suffers Data Breach

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.


Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.


Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.


Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Protection

The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.


The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Data Protection

The cryptopocalypse is the point at which quantum computing becomes powerful enough to use Shor’s algorithm to crack PKI encryption.


Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.


The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...