OMA Provides Additional Information on Cybersecurity Incident

Mexico City, Mexico, November 5, 2024— Mexican airport operator Grupo Aeroportuario del Centro Norte, S.A.B. de C.V., known as OMA (NASDAQ: OMAB; BMV: OMA) reports that, following the press release of October 18, 2024, the cybersecurity incident consisted of ransomware that encrypted some of our files and systems and exfiltration of certain information. As we have continued the investigation and the implementation of our security and contingency protocols, we have worked on restoring systems using backups, notifying the relevant authorities, and implementing mitigation measures.

Regarding information that has been identified as compromised related to certain of our business customers, suppliers and employees, and which the attacker has purportedly released, we are investigating and taking measures to inform them about the incident as required.

We are in process of further strengthening our security response protocols, policies and procedures, and our ability to detect and respond to suspected incidents.

We have not acceded to any payment demands from the attackers, nor have we suffered any material adverse effect on the Company’s operations, results or financial position, which will continue to be assessed and reported as appropriate.