1. [News](/news)
2. Overview: Air Côte d'Ivoire Data Breach

Air Côte d'Ivoire

# Overview: Air Côte d'Ivoire Data Breach

A data breach involving Air Côte d'Ivoire was reported in February 2026. See incident details, impact on customers, and recommended security measures.

UpGuard Team February 24, 2026

Table of Contents

* [What happened in the Air Côte d’Ivoire data breach?](#what-happened-in-the-air-côte-divoire-data-breach)
* [Who is behind the incident?](#who-is-behind-the-incident)
* [Impact and risks for Air Côte d’Ivoire customers](#impact-and-risks-for-air-côte-divoire-customers)
* [How to protect against similar security incidents](#how-to-protect-against-similar-security-incidents)

## Key facts: Air Côte d'Ivoire data breach

* Date reported

  : February 23, 2026.

* Unauthorized access identified

  : February 8, 2026.

* Target entity

  : Air Côte d'Ivoire (aircotedivoire.com).

* Source of breach

  : INC ransomware group.

* Data types

  : 208 GB of data allegedly exfiltrated; specific categories not disclosed but typically include corporate or customer information.

* Status

  : Confirmed; ransomware attack reported with business continuity plans active.

* Severity

  : Medium; technical experts engaged and authorities notified, though significant data volume was allegedly stolen.

Protect against attacks like INC. [See how UpGuard helps.](https://www.upguard.com/product/breach-risk/threat-monitoring)

## What happened in the Air Côte d’Ivoire data breach?

Air Côte d’Ivoire (aircotedivoire.com) confirmed it was the victim of a ransomware attack reported on February 23, 2026. The INC ransomware gang has claimed responsibility for the security incident, which reportedly occurred on February 8, 2026. The airline implemented business continuity plans after the attackers allegedly exfiltrated 208 GB of data from the organization’s network.

The incident is classified as a medium severity event, indicating that while parts of the information system were compromised, the organization has engaged technical experts to assist with ongoing operations. The airline notified relevant authorities and is currently working to assess the full impact of the breach. Such incidents typically carry risks of unauthorized data access, operational downtime, and potential exposure of sensitive corporate or customer information.

## Who is behind the incident?

The INC ransomware group is the threat actor behind the attack on Air Côte d’Ivoire. INC is a relatively recent addition to the ransomware landscape, known for targeting a variety of sectors, including healthcare, education, and government entities. The group typically utilizes a double-extortion model, where they not only encrypt the victim’s files but also exfiltrate sensitive data to pressure the organization into paying a ransom. Their methods often involve exploiting known vulnerabilities or using phishing campaigns to gain initial access. INC has recently been linked to several high-profile attacks across multiple regions, demonstrating a broad operational reach.

## Impact and risks for Air Côte d’Ivoire customers

For customers of Air Côte d’Ivoire, the primary concerns include potential identity theft, credential abuse, and targeted phishing attempts. If the 208 GB of stolen data contains personal identifiers or travel records, malicious actors could use this information to compromise secondary accounts or conduct fraudulent transactions. There is also a risk of service disruptions as the airline works to restore its full information systems and verify the integrity of its data.

These types of breaches often lead to long-term monitoring requirements for affected individuals. Users should monitor their financial statements, update account passwords, and remain skeptical of unsolicited communications. Transparent communication from the airline regarding the specific data categories involved is crucial for effective risk mitigation.

## How to protect against similar security incidents

Get instant alerts [when your data appears on the dark web](https://www.upguard.com/product/breach-risk/threat-monitoring).

## Frequently asked questions

### What happened in the Air Côte d'Ivoire security breach?

INC claimed responsibility for a security attack on Air Côte d’Ivoire (aircotedivoire.com) in February 2026. The incident was first reported on February 23, 2026.

### When did the Air Côte d'Ivoire breach occur?

The Air Côte d’Ivoire breach was publicly reported on February 23, 2026. INC referenced the incident around that time, but the attack may have occurred earlier, with reports indicating activity as early as February 8, 2026.

### What data was exposed?

The types of data involved in the Air Côte d’Ivoire incident have not been disclosed. INC has not provided evidence of specific data categories, though they claim to have stolen 208 GB of information. Ransomware attacks on airlines typically target passenger manifest and loyalty program data.

### Is my personal information at risk?

If you interacted with Air Côte d’Ivoire, there’s a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, or financial records. Stay alert for updates and take precautionary measures to secure your accounts.

### How can I protect myself after this data breach?

* Update passwords for all associated accounts
* Enable [multi-factor authentication (MFA)](https://www.upguard.com/blog/mfa-multi-factor-authentication)
* Monitor financial statements for unauthorized activity
* Be wary of suspicious emails or SMS messages
* Use [data breach monitoring tools](https://www.upguard.com/product/breach-risk/threat-monitoring) to track your information

### What steps should companies take after being impacted by this breach?

Air Côte d’Ivoire has engaged technical experts to secure systems, notified relevant authorities, and implemented business continuity plans. They are also reviewing security measures and deploying attack surface management to prevent future incidents.

## How secure is Air Côte d'Ivoire?

Air Côte d'Ivoire (aircotedivoire.com) is the national flag carrier of the Ivory Coast, based at Félix-Houphouët-Boigny International Airport in Abidjan.

* View our free preliminary report on Air Côte d'Ivoire's security posture
* 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities

[View Air Côte d'Ivoire's score View score](/security-report/air-cote-divoire)

[https://aircotedivoire.com/](/security-report/air-cote-divoire)

## Latest news

Stay up-to-date with the latest news in cybersecurity.

* ### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20)

  A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures.

  UpGuard Team July 20, 2026

* ### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19)

  A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures.

  UpGuard Team July 17, 2026

* ### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16)

  A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures.

  UpGuard Team July 16, 2026

* ### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16)

  A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures.

  UpGuard Team July 16, 2026

* ### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16)

  A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures.

  UpGuard Team July 16, 2026

* ### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16)

  A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures.

  UpGuard Team July 16, 2026

[View all news](/news)

## Sign up for our newsletter

UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
