Delta Air Lines Locks SkyMiles Accounts After In-Flight Wi-Fi Incident

In-Flight Cyber Incident Prompts Account Restrictions

Delta Air Lines has restricted SkyMiles frequent flyer accounts for all passengers aboard flight DL-591. This measure affects individuals travelling from Las Vegas to Atlanta on Monday, August 10. The airline now requires secondary verification for account access. This action follows an alleged 'evil twin' Wi-Fi attack during the three-and-a-half-hour flight.

Passengers reportedly encountered a rogue network mimicking Delta's own service. The flight, originating from Las Vegas Harry Reid Airport, had experienced an overnight delay from Sunday. Crew members noted an unauthorised Wi-Fi network named 'DELTA WIFI FAST' appearing in available connections. Such 'evil twin' networks often create fake login portals.

These portals aim to steal personal credentials from unsuspecting users. Perpetrators behind the alleged attack had reportedly attended the Def Con 34 hacking conference in Las Vegas. Delta confirmed crew members switched off the airline's own Wi-Fi for approximately 30 minutes. This allowed them to establish the nature of the issue.

Airline Initiates Investigation and Security Measures

A Delta spokesperson confirmed the airline is collaborating with federal law enforcement and aviation regulators. This partnership aims to ensure a thorough investigation into the incident. Pilots on flight DL-591 contacted Delta's operations centre in Atlanta.

They requested corporate security teams meet the aircraft upon arrival at Hartsfield-Jackson Atlanta International Airport (ATL). Delta stated it cannot comment further due to the ongoing potential criminal investigation. The airline communicated directly with affected passengers via email. Delta explained that account restrictions were a precaution.

It clarified these actions did not result from any breach of Delta or vendor systems. The airline maintains its own Wi-Fi network was never compromised. Furthermore, flight systems remained secure throughout the incident. This type of cyber threat is not unprecedented in aviation.

In 2024, Australian cybercriminal Michael Clapsis created a similar 'evil twin' network on a Qantas domestic flight. He was later sentenced to seven years' imprisonment.

Implications for Travellers and Industry Vigilance

Passengers on the affected flight must now complete secondary verification to access their SkyMiles accounts. This requirement adds an extra step to managing frequent flyer benefits. One passenger noted that Delta has not acknowledged any wrongdoing. The airline has also not provided further detailed information about the specific events.

This incident highlights potential vulnerabilities associated with in-flight connectivity. It also demonstrates the importance of passenger vigilance regarding public Wi-Fi networks. The airline's swift action to secure accounts shows its commitment to data protection. However, the lack of immediate detailed disclosure may concern some travellers.

Industry stakeholders will observe the ongoing investigation closely. This will inform future security measures for onboard internet services. Travellers should verify network authenticity before connecting to any public Wi-Fi. This includes services offered during air travel. This incident serves as a reminder of evolving cyber threats in the travel sector.