National Crime Agency
Ex-employee jailed for Jet2 cyber attacks
A disgruntled ex-employee has been jailed after he admitted carrying out cyber attacks against Jet2 which took down their computer systems for more than 12 hours.
NCA investigators proved that 27-year-old Scott Burns from Morley, Leeds, illegally accessed a domain operated by Dart Group and their subsidiary, Jet2, on two separate occasions in January 2018.
Burns pleaded guilty to eight offences under the Computer Misuse Act in November and was recently (18/12/2019) sentenced to 10 months in prison at Leeds Crown court.
Prior to the attacks, he was employed by ICT provider, Blue Chip, and worked on their Jet2 account until December 2017 when he left to work at another IT company.
After gaining access to the Jet2 network on 18 January, Burns removed a folder which stored all user account details, preventing at least 2,000 members of staff from logging into their network accounts and accessing their emails.
In an attempt to cover his tracks, Burns also deleted the program used by the company to keep detailed logs relating to events and changes on the network.
He was arrested by NCA officers on 8 February 2018 and several electronic devices were seized from his home.
Forensic analysis of his computers, along with information provided by Dart Group’s Infrastructure Team, showed that Burns was also responsible for another network intrusion against Jet2 on 3 January – which is believed to have been a scoping exercise, assessing the security of their systems in preparation for his later attack.
On a number of occasions – once on the 3rd January, during his preparation – and then several times after the attack, Burns also hacked the email inbox of Jet2’s CEO.
During interview, Burns admitted that he had illegally accessed the CEO’s inbox “once or twice” to see if anything was being said about the incident – or to see if the company had any evidence of his involvement in the attacks.
Chat records found on his phone show Burns saying he is “finally sick and tired of BC/Jet2” and he describes leaving Blue Chip as “freeeedom”. On the same phone, he had looked up the prison sentence for network intrusion in the UK on Google.
Jamie Horncastle from the NCA yesterday said:
“Network intrusion is not a victimless crime. Not only did Burns’s actions have a potential financial impact on Jet2, it caused huge disruption to their staff and technical operations.
“These are serious offences.
“The evidence secured internally by Dart Group was extremely beneficial to this investigation. I would always encourage victims of such attacks to preserve as much evidence as possible in the immediate aftermath – it will assist law enforcement in catching the perpetrator.”
Latest News from
National Crime Agency
Weleakinfo.com: Site hosting stolen credentials taken down after international operation17/01/2020 16:05:00
A website which provided access to more than 12 billion personal credentials to cyber criminals for as little as $2 per day has been taken down following an investigation led by the National Crime Agency (NCA), in collaboration with international law enforcement partners.
Clock is ticking for waste criminals as new taskforce launched17/01/2020 11:26:00
A new unit will bring together law enforcement agencies and UK environmental regulators to target waste criminals.
Illegal immigration passport supplier sentenced after eight years on the run16/01/2020 09:15:00
A man who evaded arrest for eight years after supplying passports to Albanian nationals trying to illegally enter the UK was yesterday jailed.
Court grants NCA £1m freezing order14/01/2020 11:15:00
The NCA has obtained a £1.13 million Account Freezing Order as part of an investigation into a Leeds businessman with suspected links to serious organised criminals.
Strong progress on County Lines – NCA working with police to improve further13/01/2020 13:15:00
Her Majesty’s Inspectorate of Constabulary and Fire and Rescue Services (HMICFRS) has published a report after an inspection of how County Lines is dealt with at local, regional and national levels.
Cyber criminal jailed over National Lottery hack13/01/2020 11:47:00
A cyber criminal was recently (10 January 2020) jailed for nine months for committing offences against the National Lottery, after a National Crime Agency investigation.
Jail for mother and daughter who tried to smuggle drugs into Scottish airports09/01/2020 14:15:00
A mother has been jailed for smuggling cannabis into the UK via Edinburgh Airport, the day before her daughter was caught doing exactly the same in Glasgow.
North Wales care home owner John Allen jailed for a further 14 and a half years for abusing five boys09/01/2020 11:15:00
John Allen is already serving a life sentence for sexually abusing children.