Hackers claiming affiliation with the activist collective Anonymous have targeted GlobalX Airlines, the US charter carrier used for deportation flights, leaking sensitive flight data and taunting former President Donald Trump with a defaced company website.
The attackers claimed to have accessed detailed flight manifests, passenger lists, and internal communications from GlobalX’s systems.
They reportedly exploited a developer token to uncover access credentials for the airline’s Amazon Web Services (AWS) infrastructure.
In a public message replacing GlobalX’s homepage, the hackers included the familiar Guy Fawkes mask image and a direct jab at Trump: “You lose again, Donnie.”
The message accused the company of aiding unlawful deportations and ignoring legal rulings, adding: “Anonymous has decided to enforce the Judge’s order since you and your sycophant staff ignore lawful orders that go against your fascist plans.”
According to a report by 404 Media, the leak includes flight logs and passenger data spanning from 19 January to 1 May 2025, affecting hundreds of Venezuelan migrants.
The outlet said the information has been verified against official ICE logs and legal documents.
The hacker claims they also gained access to GlobalX’s GitHub and used Airbus’s NAVBLUE system to send internal messages to pilots, raising serious concerns over the airline’s cybersecurity practices.
The breach highlights a glaring lack of protections within the company’s cloud infrastructure.
As of publication, neither GlobalX nor US immigration authorities have publicly responded to the breach. It’s also unclear whether the leak will impact deportation flight operations going forward.
The attack adds to growing scrutiny over deportation procedures and the role of private contractors.
With a message directed at Trump and detailed exposure of government-linked flights, the hack appears designed as both protest and warning.
COMMENTS
Comments are moderated and generally will be posted if they are on-topic and not abusive.
For more information, please see our Comments FAQ