RANSOMWARE VICTIMTRANSPORTATION/LOGISTICSDUPLICATE CLAIM

Sunlight Express Airways

payload📅 April 16, 2026
8
same group

Attack Intelligence

Sunlight Express Airways was compromised in a ransomware attack attributed to payload in April 2026. The organization, operating in the Transportation/Logistics sector in Unknown, was added to the group's data leak site as part of an extortion campaign.

payload operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Sunlight Air offers affordable flights to popular Philippine island destinations such as Cebu, Coron, Boracay, Siquijor, and Siargao. The airline provides various services including private charters, vacation packages, and a loyalty program called Sunlight Miles. Targeting both leisure and business travelers, Sunlight Air aims to enhance the travel experience with exclusive passenger perks and flexible booking options. With a commitment to expanding flight frequencies and routes, the company continues to facilitate convenient travel across the Philippines.

Additional Details

data_size
200 GB

Other Victims — payload (8)

Quick Facts

SectorTransportation/Logistics
Attack DateApr 16, 2026
Intel Sourceransomlook
StatusDUPLICATE CLAIM

Threat Group

payload
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.