Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

American Airlines, Southwest Airlines Impacted by Data Breach at Third-Party Provider

The personal information of American Airlines and Southwest Airlines pilots was exposed in a data breach at a third-party services provider.

American Airlines and Southwest Airlines have started informing thousands of pilots that their personal information was compromised in a data breach at Pilot Credentials.

A portal managing pilot and cadet recruitment applications on behalf of various airlines, Pilot Credentials informed both companies on May 3 that it had suffered a cyberattack resulting in the compromise of files on its systems.

The vendor was breached on or around April 30 and the attackers obtained files containing the personal information of pilot and cadet applicants.

The compromised information includes names, birth dates, Social Security numbers, driver’s license numbers, Airman Certificate numbers, and passport and other ID numbers.

Both airlines say they moved pilot applications to internal portals managed by the airlines themselves.

American Airlines and Southwest Airlines say that they have no evidence that the exposed information has been misused. However, stolen personal data is typically sold or shared on underground cybercrime websites and may be used in other types of attacks.

The airlines also pointed out that the attack targeted the vendor’s systems only and that neither American Airlines nor Southwest Airlines systems or networks were compromised.

Advertisement. Scroll to continue reading.

American Airlines informed the Maine Attorney General’s Office that more than 5,700 individuals were impacted by the data breach. Southwest Airlines said that just over 3,000 were impacted.

In September last year, American Airlines disclosed a data breach after the email account of an employee was used in phishing attacks. The company said at the time that the personal information of multiple employees was eventually compromised in the attack.

Related: BBC, British Airways, Novia Scotia Among First Big-Name Victims in Global Supply-Chain Hack

Related: Outages Blamed on Malware Still Plaguing Budget Airlines

Related: Multiple Airlines Impacted by Data Breach at Aviation IT Firm SITA

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join security experts as they discuss ZTNA’s untapped potential to both reduce cyber risk and empower the business.

Register

Join Microsoft and Finite State for a webinar that will introduce a new strategy for securing the software supply chain.

Register

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.

Data Breaches

GoTo said an unidentified threat actor stole encrypted backups and an encryption key for a portion of that data during a 2022 breach.

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.

Data Breaches

KFC and Taco Bell parent company Yum Brands says personal information was compromised in a January 2023 ransomware attack.

Cybercrime

Instant Checkmate and TruthFinder have disclosed data breaches affecting a total of more than 20 million users.