American and Southwest Airlines Breach
Date: April, 2023Most Americans and citizens in many other parts of the world have heard of American Airlines and Southwest Airlines. Both airlines are well-known for offering a huge number of flights throughout the United States and in other areas of the world. These airlines receive a massive number of pilot applications annually, and the application process demands a large amount of information from these applicants. That applicant data was stored by a special third-party company for both airlines, but a recent breach has exposed thousands of pilot and cadet applicants and forced the airlines to reconsider how they handle applicant data.
What Was the Breach?
- Airman Certificate Numbers
- Home Addresses
- First and Last Names
- Social Security Numbers
- Birth Dates
- Passport Data
- Driver's License Number
- Additional Government Identifications
How Did the Breach Occur?
Applicants to Southwest Airlines and American Airlines had their data exposed because Pilot Credentials was hacked by a group of hackers. The attack gave the hackers access to a large amount of data for applicants from both of these key airlines, and the organizations quickly stopped using the service and alerted authorities of the issue.
When Did This Breach Occur?
The breach first occurred on April 30, 2023, and the two airlines were warned about it on May 3, 2023. It wasn't until late June that American Airlines filed a notice with the Maine Attorney General's Office.
Who Does the Breach Impact?
This pilot data breach impacts pilot and cadet applicants to American Airlines and Southwest Airlines. According to expert research, approximately 5,745 American Airlines applicants were affected, and 3,009 Southwest Airlines applicants were.
How Many Files Does the Breach Affect?
We don't know the specific details of how many files were involved in this breach. It was likely several different documents and forms for each of the specific applicants involved. That makes it even more likely that tens of thousands of forms and files were involved overall.
Recent Breaches
Cisco Duo Breach
Cisco Duo is an access security provider that offers solutions for small business and commercial control products, including multi-factor authentication (MFA), single sign-on, and access control services....
AT&T Breach
American Telephone and Telegraph Company (AT&T) is the fourth-largest telecommunications provider, behind Verizon, Comcast, and China’s state-funded communications solution...
Fujitsu Limited Breach
Fujitsu Limited is the world’s sixth-largest IT service provider. Based in the Minato City ward of Tokyo, Japan, Fujitsu offers various technology solutions for personal and commercial use...
Cybersecurity and Infrastructure Security Agency Breach
The CISA collaborates with other government agencies to notify victims of breaches and respond to threats. These include the Federal Bureau of Investigation, the Multi-State Information Sharing & Analysis...
Roku Inc. Breach
Roku is a global streaming and entertainment organization. It offers solutions for direct streaming, live channels, music, niche channel entertainment, smart home devices, travel technology, audio options,...