TAIPEI — Two major companies under Taiwan’s Evergreen Group have reported separate cyberattacks, raising fresh concerns over cybersecurity in the aviation industry after unauthorized activity was detected in their internal systems.
EVA Air and Evergreen Aviation Technologies Corp. (EGAT) disclosed the incidents Tuesday, with both companies saying they had activated security measures and launched investigations.
The incidents affected different systems, and there is currently no public evidence establishing that the attacks were connected.
EVA Air Says Employee Information Was Accessed
EVA Air said an unidentified party used a malicious IP address to gain unauthorized access to its systems.
The airline said its initial investigation found that employee names and business contact information had been accessed.
EVA Air immediately activated its incident-response procedures, reviewed potential cybersecurity vulnerabilities and notified relevant authorities. Employees were also informed about the incident.
Importantly, the airline said its initial assessment found no impact on normal business operations.
That means there was no immediate indication that passenger flights or the airline’s core operating services had been disrupted by the incident.
Evergreen Aviation Isolates Affected Equipment
Evergreen Aviation Technologies, an aircraft-maintenance and aviation-engineering company, reported a separate cybersecurity incident involving some of its information systems.
After detecting abnormal activity, the company said it isolated the affected equipment and brought in an external cybersecurity team to help investigate what happened.
Its initial assessment found that core information systems and business operations were continuing normally.
The company also said it had found no evidence that sensitive personal information belonging to the company, its customers or third parties had been compromised at the time of its initial assessment.
EGAT said it would report the incident to authorities.
Why the Aviation Sector Is a Prime Cybersecurity Concern
The incidents highlight the growing cybersecurity challenges facing aviation companies, whose digital networks can span passenger services, cargo operations, aircraft maintenance, employee systems and suppliers.
A successful intrusion does not necessarily mean flights are immediately grounded. Cyberattacks can instead involve the theft of corporate information, unauthorized access to internal systems or attempts to establish longer-term access.
That makes the early stages of an investigation particularly important: companies often need time to determine what systems were accessed, what information may have been exposed and whether attackers were able to move further through their networks.
No Evidence Yet of Operational Disruption
For travelers, the most immediate question is whether the incidents affected EVA Air’s flights.
Based on the companies’ initial statements, operations remained normal.
EVA Air is one of Taiwan’s largest airlines, operating passenger and cargo services internationally, while Evergreen Aviation Technologies specializes in aircraft maintenance, components and aviation engineering.
The distinction is important because a cybersecurity incident and an operational shutdown are not necessarily the same thing.
Investigation Is Still Underway
The companies’ initial assessments provide only a snapshot of what was known when the incidents were disclosed.
EVA Air is continuing to examine potential vulnerabilities after reporting unauthorized access, while EGAT has brought in outside cybersecurity specialists to investigate its affected systems.
At this stage, publicly available reporting does not identify the attackers, establish their motive or demonstrate that the two incidents were coordinated.
The most significant unanswered questions are therefore what additional information investigators may uncover, whether the attackers retained access to any systems and whether further data exposure is discovered.
For Taiwan’s aviation industry, the incidents serve as another reminder that cybersecurity is increasingly tied to the resilience of critical transportation and maintenance networks.
The systems are still running—but the bigger question may be what investigators discover inside the networks after the initial breach.
WWC ONE MEDIA G.A
Leave a Reply