Jet2 worker with a grudge jailed for cyber-attack that shut down network for 12 hours
A contractor with a grudge over the handling of an incident in Benidrom has been jailed for carrying out a revenge cyber attack.
Scott Burns, 27, was unhappy with the way a disciplinary matter against him by Jet2 was dealt with so decided to cause harm.
The attack led to the company’s computer network being shut down for 12 hours and it was only thanks to a fast-thinking colleague that a ‘complete disaster’ was avoided.
Burns’s attack cost the company £165,000 in lost business, Leeds Crown Court was told.
Jailing Burns for 10 months, Judge Andrew Stubbs QC heard how the motive was revenge because Burns was unhappy about how Jet2 dealt with a disciplinary matter against him relating to an incident at a ‘roadshow in Benidorm’ in 2017.
No further details of the incident were outlined in court.
Judge Stubbs told Burns: ‘What you intended to do was to cause as much damage to Jet2’s computer system as you could.
‘But for the prompt measures of an employee of Jet2, this would have been disastrous and brought their computer system crashing down.
‘This went far beyond being mischievous. This was a revenge attack for a perceived slight you had suffered.’
Judge Stubbs rejected a plea from Michael Walsh, defending, to suspend Burns’s sentence.
The judge said he needed to send a message about the ‘pernicious and far reaching impact’ of cyber-crime and to ‘those who are minded to commit this type of offence’.
Prosecutor Rebecca Austin told the court Burns used logins he still had to access the system and delete all user accounts, including those with admin privileges, in January 2018.
She said one quick-thinking IT worker in the firm managed to create a new, hidden admin account as the attack was ongoing and, through this, was able to avert a ‘complete disaster’ and rebuild the accounts from a back-up.
Ms Austin said Burns, of Morley, Leeds, also accessed the email account of Jet2 chief executive Steve Heapey.
The defendant pleaded guilty to eight counts under the Computer Misuse Act at a previous hearing.
A Jet2 spokesman stressed that Burns had not been an employee of Jet2 but worked for IT contractors Blue Chip.
He said: ‘We welcome this sentencing, which sends out a strong message to others.
‘We would also like to thank the National Crime Agency and the Crown Prosecution Service for pursuing this case.
‘Our IT teams initiated a quick and comprehensive response, and there was no loss or theft of any customer, supplier or group data whatsoever.’
Gloss