Tech

Woman Allegedly Hacked Flight School, Cleared Planes With Maintenance Issues to Fly

A 26-year-old allegedly hacked into an app used by a flight school to manage airplanes in an attempt to get back at her former employer.
cessna-152
Image: aviation-images.com/Universal Images Group via Getty Images
Screen Shot 2021-02-24 at 3
Hacking. Disinformation. Surveillance. CYBER is Motherboard's podcast and reporting on the dark underbelly of the internet.

A woman allegedly hacked into the systems of a flight training school in Florida to delete and tamper with information related to the school's airplanes. In some cases, planes that previously had maintenance issues had been "cleared" to fly, according to a police report. The hack, according to the school's CEO, could have put pilots in danger. 

Lauren Lide, a 26-year-old who used to work for the Melbourne Flight Training school, resigned from her position of Flight Operations Manager at the end of November of 2019, after the company fired her father. Months later, she allegedly hacked into the systems of her former company, deleting and changing records, in an apparent attempt to get back at her former employer, according to court records obtained by Motherboard. 

Advertisement

The news of her arrest was first reported by local TV station News Channel 8

Derek Fallon, the CEO of Melbourne Flight Training called the police on January 17, 2020, and reported that five days before, he logged onto his account for Flight Circle, an app his company uses to manage and keep track of its airplanes, and found that there was missing information. Fallon found that someone had removed records related to planes with maintenance issues and reminders of inspections had all been deleted, "meaning aircraft which may have been unsafe to fly were purposely made 'airworthy,'" according to a document written by a Melbourne Airport Police officer. 

Screen Shot 2021-10-12 at 11.39.31 AM.png

The list of data and information that Fallon reported to have been deleted or tampered with. (Image: Motherboard/Court Records)

"Between the time the data was altered and fixed, it was a situation that could have endangered human life,” Fallon stated in a sworn affidavit. Fallon then grounded all flights. Five days later, he called the police and accused Hampton Lide and his daughter Lauren of being behind the hack, according to the document.

The owner of Flight Circle found that the records had been tampered with by someone who logged in with the credentials of Melbourne Flight Training's current Flight Operations Manager, according to the document. 

Police investigators then obtained information related to the IP address used to access that account, and found that it belonged to Hampton Lide. The investigators also subpoenaed Google for information about a Gmail account used to log into the Flight Circle app, and found that the email address belonged to a user with the name "The Lides." Hampton Lide would later tell investigators that this was the family's email address, according to the document. 

Advertisement

"There are no other companies/organizations at the Melbourne International Airport that use the Flight Circle program, so the knowledge required to modify/delete/alter these records would likely have had to come from an employee with Melbourne Flight Training with 'administrator rights," the Melbourne Police Department stated in the document. 

Ultimately, the investigator said they believe Lauren Lide used the Melbourne Flight Training's current Flight Operations Manager account to tamper with the system. It's unclear how she allegedly obtained his password. 

In an interview with the police, Hampton Lide denied having knowledge of these events, but said he was "kinda concerned about my daughter."

"You guys don't know how [Fallon] fucked with her … I mean he fucked with her, and fucked with her and fucked with her, made her miserable, lied to her. She couldn't wait to get out of there," Hampton said, according to the court document, adding that his daughter was also angry because Fallon fired him. "You guys don't get the torment he put her through, and the bullshit he put her through."

Lide was charged with a count of fraudulent use of a computer, and two counts of unauthorized access to a computer system or network. 

Melbourne Flight Training did not respond to a request for comment sent via the company's website. 

When Motherboard called the phone number listed in the court documents for Hampton Lide, a man identifying as him said "I don't know anything about it," and hung up.

Lauren Hide did not immediately respond to a voicemail left at a cellphone number listed in the document as her cellphone.

Subscribe to our new cybersecurity podcast, CYBER. Subscribe to our new Twitch channel.