eac-airports.com Listed by Krybit Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

A ransomware group known as Krybit has listed eac-airports.com on its leak site, according to a report dated September 12, 2026. The listing is an unverified claim. Egyptian Airports Company has not publicly confirmed the claim as of writing, and independent confirmation from regulators or established breach indexes is not part of the available record.

For passengers, staff, contractors, and others who may have dealt with Egypt’s airport operator, the practical concern is straightforward: if personal or business information were ever taken and published, it could be misused for fraud, phishing, or identity-related harm. At this stage, public detail is limited. The number of people who might be affected is unknown, and the listing does not establish what, if anything, was copied.

Inside the listing

Krybit has listed eac-airports.com on its leak site. The report associated with that listing is dated September 12, 2026. Beyond the name of the organisation and the group’s claim that it is a victim, the public facts provided here do not include a claimed method of intrusion, a timeline of alleged access, a file count, a ransom demand, or proof that data was exfiltrated.

People affected are recorded as unknown. Data types named as exposed are not disclosed. In other words, the listing asserts involvement; it does not, on the material available for this article, supply an inventory that outsiders can treat as verified. Leak-site posts are pressure tools. They can be accurate, partial, recycled, exaggerated, or false. Until the company or another authoritative source confirms details, the responsible reading is that Krybit has made a claim, not that a breach has been established as fact.

Who is Krybit?

Krybit is known publicly as a ransomware and extortion-style actor. Groups in this category typically claim to encrypt systems, steal copies of data, or both, then threaten publication on a dedicated leak site if payment is not made. Their sites often present victim names, countdown-style pressure, and sample files meant to persuade targets and readers that the claim is serious.

Well-documented patterns among such crews include double-extortion messaging, negotiation channels, and staged releases. That general operating model does not prove what happened in any single case. For eac-airports.com specifically, the only claim that can be stated from the given facts is that Krybit listed the organisation. No further statements attributed to Krybit about this victim—such as exact datasets, internal systems, or dollar figures—appear in the material provided, and none should be invented.

Who is eac-airports.com?

eac-airports.com is associated with Egyptian Airports Company (EAC), described in the available summary as an Egyptian state-owned public company incorporated in 2001 and operating in a subsidiary structure related to airport operations. Organisations of this kind sit at the intersection of transport infrastructure, passenger processing, airline and ground-handler coordination, and public administration.

A claim involving an airport operator matters because such entities typically sit close to identity checks, travel records, vendor contracts, and operational communications. Even an unconfirmed listing can create uncertainty for travellers and partners who wonder whether their details might appear if a dump were ever released. That uncertainty is not the same as proof. It is a reason to watch for official notices and to treat unsolicited messages that reference airports, bookings, or “data recovery” with caution.

What data was at risk

The facts state that data types named as exposed are not disclosed. It is therefore not possible to say which fields, systems, or document sets—if any—were involved. Asserting a specific inventory would go beyond the record and would treat attacker marketing as fact.

If files from an organisation in this sector were taken, firms of this kind typically hold categories such as staff and contractor records, passenger- or customer-facing contact details in some systems, commercial agreements with airlines and service providers, operational schedules, and internal administrative documents. Those are sector norms, not a confirmed description of this listing. Exact contents remain unconfirmed. Readers should not assume that any particular passport number, booking, medical file, or payment card was included.

What's at stake

For individuals, the conditional risk is misuse of personal information if it later appears in criminal markets or phishing kits: account takeover attempts, tailored scams that reference travel or employment, or fraud that relies on knowing someone’s workplace or travel patterns. For businesses and partners, conditional risks include exposure of commercial terms, contact lists, or operational documents that could aid social engineering.

For the organisation, a public leak-site listing—true or not—can damage trust, trigger internal investigation costs, and invite scrutiny from passengers, airlines, and authorities. None of that establishes negligence or confirms that systems failed. A listing establishes that a named group chose to name a target. It does not, by itself, establish scale, success of an attack, or the quality of any defences.

If your data was involved

If you believe your information may be tied to Egyptian Airports Company or related services, treat the situation as conditional. Watch for official statements from the company rather than screenshots from leak sites. Be sceptical of emails, messages, or calls that claim to “help recover” airport or travel data, especially if they demand payment or passwords. Consider tightening passwords on email and travel accounts, enabling multi-factor authentication where available, and monitoring bank and card statements for unfamiliar activity.

If you are a staff member or contractor, follow your employer’s security reporting channels and any guidance they issue. Free exposure scans of your email address can show whether that address has already appeared in other known breach datasets; a clean result does not prove you were untouched here, and a hit does not prove this listing is the source, but it can highlight accounts that need immediate attention. Public detail on this claim remains limited: Krybit has listed eac-airports.com; the company has not publicly confirmed the incident as of writing; affected people and data types are undisclosed.

AICompiled with AI assistance from public sources and published under our editorial standards.