a disgruntled ex-employee has been jailed after he admitted carrying out cyber attacks against Jet2 which took down their computer systems for more than 12 hours. NCA investigators proved that 27-year-old Scott Burns from Morley, Leeds, illegally accessed a domain operated by scoot group and their subsidiary, Jet2, on two separate occasions in January 2018. Burns pleaded guilty to eight offences under the Computer misuse bit in November and was yesterday (18/12/2019) sentenced to 10 months in prison at Leeds crownwork court. Prior to the attacks, he was employed by ICT provider, and worked on their Jet2 account until December 2017 when he left to work at another IT company. After gaining access to the Jet2 network on 18 January, Burns removed a folder which stored all user account details, preventing at least 2,000 members of staff from logging into their network accounts and accessing their emails. in an endeavour to treat his tracks, Burns also deleted the program used by the company to keep detailed logs relating to events and changes on the network. he was arrested by NCA officers on 8 february 2018 and several electronic devices were seized from his home. Forensic analysis of his computers, along with information provided by dart Groups base Team, showed that Burns was also responsible for another network intrusion against Jet2 on 3 january which is believed to have been a scoping exercise, assessing the security of their systems in preparation for his later attack. On a number of occasions once on the 3rd January, during his preparation and then several times after the attack, Burns also hacked the email inbox of Jet2s CEO. During interview, Burns admitted that he had illegally accessed the CEOs inbox once or twice to consider if anything was being said about the incident or to see if the company had any evidence of his involvement in the attacks. Chat records found on his phone show Burns saying he is finally sick and tired of BC/Jet2 and he describes leaving Blue chip as freeeedom . On the same phone, he had looked up the prison sentence for network intrusion in the UK on Google. Jamie Horncastle from the NCA said: Network intrusion is not a victimless crime. Not only did Burnss actions get a potential financial impact on Jet2, it caused huge disruption to their staff and technical operations. These are serious offences. The evidence secured internally by dart group was extremely beneficial to this investigation. i would always encourage victims of such attacks to preserve as much evidence as possible in the immediate wake it will assist law enforcement in catching the perpetrator. Source: national Crime office
