Executive Jet Support Listed by datacarry Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People whose personal or professional details sit inside the systems of aviation-support firms face a practical risk when those systems are claimed to have been breached: contact information, contractual records or operational documents can be misused for fraud, phishing or competitive harm. On 30 January 2025 the ransomware group datacarry listed Executive Jet Support, a UK-based provider of aircraft-parts and maintenance services, as a victim and asserted that internal files had been taken. The number of individuals affected remains unknown, and public detail is limited, yet the listing itself is enough to warrant careful attention from anyone who has dealt with the company.

What follows is a factual account of the reported incident, the actor involved, the organisation’s role in the aviation sector, and the concrete steps people can take while fuller information is still unavailable.

Inside the incident

According to the public listing published by datacarry, Executive Jet Support suffered a ransomware attack in which internal files were exfiltrated. The group reported the incident on 30 January 2025. No further technical details—such as the initial access method, the precise date of intrusion, the volume of data removed, or any ransom demand—have been disclosed in the available record. The number of people whose information may be involved is listed as unknown. The claim rests solely on the group’s leak-site entry; independent confirmation of the breach has not been provided in the facts at hand.

Inside datacarry

datacarry is a ransomware operation that follows the now-common double-extortion model: after gaining access to a network it encrypts systems and simultaneously copies data, then threatens to publish the stolen material if a payment is not made. Groups of this type typically advertise victims on dedicated leak sites, posting sample files or full archives to increase pressure. Public reporting over recent years has shown that such actors target a wide range of industries, including manufacturing, logistics and professional services, and that they often reuse well-known initial-access techniques such as phishing, exploitation of unpatched remote-access software, or purchase of credentials from initial-access brokers. No specific statements by datacarry about Executive Jet Support beyond the listing itself are recorded in the available facts; any claims of data volume or content remain unverified assertions by the group.

Who is Executive Jet Support?

Executive Jet Support is a United Kingdom company that supplies comprehensive support services to the global aviation industry. Its activities include the supply of aircraft parts, engine sales and leasing, component repair and overhaul, and aircraft disassembly. The firm works with both commercial airlines and military operators, providing maintenance, repair and operational support for fleets worldwide. Organisations of this kind routinely hold technical documentation, supplier and customer contracts, inventory records, and correspondence that may contain personal or commercially sensitive information. A breach affecting such a company therefore carries consequences not only for the firm’s own staff and partners but also for the broader aviation supply chain that relies on timely, accurate parts and service data.

What was likely exposed

The only data type named in the available facts is “internal files” said to have been exfiltrated during the ransomware attack. No inventory of those files, no count of records, and no confirmation of whether personal data, financial details or technical specifications were included has been released. Companies that manage aircraft parts, engine leasing and military-support contracts typically store customer contact lists, purchase orders, maintenance logs, employee records and contractual documents. Whether any of those categories were among the files taken remains unconfirmed; the exact contents are therefore unknown.

What's at stake

For individuals whose details may appear in the internal files, the principal risks are targeted phishing, identity fraud or social-engineering attempts that exploit knowledge of aviation contracts or personal contact information. For the organisation itself, the exposure of operational documents can disrupt supply-chain relationships, invite regulatory scrutiny under data-protection rules, and create competitive disadvantage if proprietary pricing or inventory data become public. Because the number of affected people is unknown and the precise data types remain undisclosed, the full scope of harm cannot yet be measured; the prudent course is to treat the claim seriously while awaiting clearer information.

Were you affected?

Anyone who has supplied personal or business information to Executive Jet Support—employees, suppliers, customers or contractors—should monitor accounts for unusual activity and treat unexpected emails or calls that reference aviation contracts with caution. Change passwords on any related accounts, enable multi-factor authentication where available, and consider placing fraud alerts with relevant credit or identity-monitoring services. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Until more definitive information is released, these basic steps remain the most practical response.

AICompiled with AI assistance from public sources and published under our editorial standards.