InfoSecBulletin Cybersecurity for mankind
American Airlines and Southwest Airlines, two of the largest airlines in the world, disclosed on Friday that their data had been breached. The breach was caused by a hack of Pilot Credentials, a third-party vendor that manages pilot applications and recruitment portals for multiple airlines.
The breach affected 5745 pilots and applicants at American Airlines and 3009 at Southwest Airlines. The stolen information included names, Social Security numbers, driver’s licenses, passports, dates of birth, and Airman Certificate numbers.
Ransomware Crisis in 2026: 5,064 Organizations Affected in 135 Countries
Palo Alto Networks Addresses 13 Vulnerabilities
Critical Dell BIOS & Zimbra Flaws Expose Enterprise Systems
CoLoCity Launches New 1.0 MW Data Center Facility at Gulshan
Daily Cyber security update for 10. 07. 2026
How Hacker Compromise AWS Cloud Environment Using AI in 72 Hours
Mycelium Framework: First AI-as-a-Service Botnet
CrowdStrike Shows 5 New Prompt Injection Techniques for AI Agents
Critical GCP Dialogflow Vulnerability Allows Malicious Code Injection
CIRT identified 153 publicly exposed FortiGate devices in Bangladesh
American Airlines and Southwest Airlines said that there is no evidence that the stolen information has been used for fraudulent or identity theft purposes. However, the airlines are no longer using Pilot Credentials and are directing all pilot and cadet applicants to self-managed internal portals.
This is not the first time that American Airlines has been hit by a data breach. In September 2022, the airline disclosed that a phishing attack had compromised the personal information of over 1,700 customers and employees. And in March 2021, American Airlines was one of several airlines that was affected by a data breach at SITA, a global air information tech giant.
American Airlines is the world’s largest airline by fleet size, while Southwest Airlines is the world’s largest low-cost carrier. Both airlines have a combined workforce of over 190,000 people.
The data breaches at American Airlines and Southwest Airlines are a reminder of the importance of data security. Airlines collect a lot of personal information about their customers and employees, and this information is a valuable target for hackers. Airlines need to take steps to protect this information from unauthorized access.
Here are some additional details about the data breach:
- The breach occurred on April 30, 2023.
- The unauthorized individual gained access to Pilot Credentials’ systems by exploiting a vulnerability in the vendor’s software.
- The stolen information was not encrypted, which made it easier for the attacker to access it.
- American Airlines and Southwest Airlines have notified law enforcement of the breach and are cooperating with the investigation.
