Global Crossing Airlines Group, a Miami-based airline facilitating ICE deportation flights, suffered a cyberattack on May 5 by a hacker identifying as Anonymous. The breach granted unauthorized access to business application systems, allowing the theft of flight records and manifests—including sensitive details of ICE deportation operations. The hacker defaced the company’s website before exfiltrating data, which was later verified against public deportation reports by 404 Media. While the company claimed no operational disruption and no material financial impact, the stolen data exposed its involvement in controversial deportation flights, risking reputational damage and potential legal or regulatory scrutiny. The incident prompted engagement with law enforcement and a cybersecurity firm, but the company did not disclose whether personal data of employees, passengers, or deported individuals was compromised. The FBI and DHS declined to comment. GlobalX, which earns $65M annually from ICE contracts, faces indirect consequences from the public exposure of its role in deportations, though no direct financial or operational harm was confirmed.

In March, the hacktivist collective Anonymous targeted GlobalX Airlines in retaliation for the U.S. government’s decision to deport alleged members of the Venezuelan gang Tren de Aragua. The attackers launched a distributed denial-of-service (DDoS) operation that disrupted and defaced the airline’s public website, preventing customers from accessing booking tools and flight schedules for several hours. Concurrently, Anonymous exfiltrated the company’s flight manifest report, exposing sensitive passenger information such as names, contact numbers, crew details and other flight data. This stolen dataset was later cited by independent outlet 404 Media as evidence in a class action lawsuit aiming to block the forced removal of the accused gang members. Although GlobalX has since restored website functionality and taken measures to secure its infrastructure, the incident underscores significant lapses in the protection of personal data and raises concerns about potential identity theft, legal liabilities and damage to the carrier’s reputation. The breach also follows a related incident in which Anonymous released 10 TB of data purportedly containing corruption files and Trump-related information stolen from the Russian government, highlighting the group’s capacity for large-scale cyber intrusions.