Air Canada (CA) reported that thegentlemen ransomware activity impacted its network, with 51,409 critical files reportedly taken, as the organization faced disruption across its operations in Canada. The claim was associated with targets in #Canada.
Incident Details
- Victim: Air Canada
- Sector: Transportation
- Country: CA
- Actor: thegentlemen
- Source:
- Discovered: 2026-09-09T22:08:43.802697+00:00
- Published: 2026-09-09T16:10:41+00:00
Information
- Canada’s flag carrier and largest airline, founded in 1937 as Trans-Canada Air Lines and headquartered in Montréal, with about 37,000 employees.
- Served 45.3 million passengers in 2025 and is a founding member of Star Alliance.
- Reported record revenue of $22.37B CAD in 2025, including $6.27B in Q2 2026 alone, up 11%.
- Q2 2026 was impacted by a fuel shock of +50.8% per litre and $388M in one-off charges, resulting in a $178M net loss and a guidance cut.
- Strong fundamentals remain in place, including an 87.5% load factor, Aeroplan with 10M+ members, Cargo growth of 29%, and resilient Sixth Freedom traffic.
- Undergoing the most aggressive fleet renewal in its history, including A321XLRs with Canada’s first lie-flat seats on a narrowbody, plus 787-10s and A350-1000s.
- These aircraft are enabling new thin long-haul routes that widebodies could not previously serve, including Oslo, Shannon, Basel, Dubrovnik, and Guangzhou.
- Expansion is being positioned ahead of major events such as Super Bowl 2027 and the LA 2028 Olympics.
- 51409 critical files were taken.
Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.