Description: GlobalX, an American airline involved in the Trump administration’s deportation of illegal aliens, suffered a cyberattack on May 5, 2025. The hacktivist group Anonymous defaced the company’s website and allegedly stole sensitive data, including flight records and passenger manifests. The attack was in response to the company's non-compliance with court rulings regarding deportations. GlobalX reported the breach to the SEC and activated its incident response protocol. The company believes that none of its operations were disrupted or otherwise negatively impacted.

Description: The website of GlobalX Air, a US-based airline used for deportation flights, was defaced by actors claiming affiliation with Anonymous. During the incident, attackers replaced the homepage content with a message accusing the airline of ignoring judicial orders related to deportation rulings. In addition to the defacement, the threat actors exfiltrated sensitive files, including complete flight records and passenger manifests for all customers—covering illegal immigrants and other passengers. The stolen data was subsequently shared with select media outlets, exposing granular details about who was deported, along with dates and destinations. This breach not only undermines the confidentiality of passenger information but also reveals operational details about deportation flights used by the US government. The exposure of personal and travel data raises significant privacy concerns, potentially enabling identity theft, targeted harassment, or geopolitical risks for affected individuals. Following the attack, the website was restored to its original state, but the scope of data loss remains a serious liability for the airline and its customers.

Description: Global Crossing Airlines Group, a Miami-based airline facilitating ICE deportation flights, suffered a cyberattack on **May 5** by a hacker identifying as **Anonymous**. The breach granted unauthorized access to **business application systems**, allowing the theft of **flight records and manifests**—including sensitive details of ICE deportation operations. The hacker defaced the company’s website before exfiltrating data, which was later verified against public deportation reports by **404 Media**. While the company claimed **no operational disruption** and **no material financial impact**, the stolen data exposed its involvement in controversial deportation flights, risking **reputational damage** and potential **legal or regulatory scrutiny**. The incident prompted engagement with **law enforcement and a cybersecurity firm**, but the company did not disclose whether **personal data of employees, passengers, or deported individuals** was compromised. The FBI and DHS declined to comment. GlobalX, which earns **$65M annually from ICE contracts**, faces indirect consequences from the **public exposure of its role in deportations**, though no direct financial or operational harm was confirmed.

Description: In March, the hacktivist collective Anonymous targeted GlobalX Airlines in retaliation for the U.S. government’s decision to deport alleged members of the Venezuelan gang Tren de Aragua. The attackers launched a distributed denial-of-service (DDoS) operation that disrupted and defaced the airline’s public website, preventing customers from accessing booking tools and flight schedules for several hours. Concurrently, Anonymous exfiltrated the company’s flight manifest report, exposing sensitive passenger information such as names, contact numbers, crew details and other flight data. This stolen dataset was later cited by independent outlet 404 Media as evidence in a class action lawsuit aiming to block the forced removal of the accused gang members. Although GlobalX has since restored website functionality and taken measures to secure its infrastructure, the incident underscores significant lapses in the protection of personal data and raises concerns about potential identity theft, legal liabilities and damage to the carrier’s reputation. The breach also follows a related incident in which Anonymous released 10 TB of data purportedly containing corruption files and Trump-related information stolen from the Russian government, highlighting the group’s capacity for large-scale cyber intrusions.