Pilot Credentials Data Breach 2023

Hey Techies!

It is summertime and more people are taking trips to catch some rays. Airline travel increases during this time of year, commonly affecting the passengers. We can discuss this at another time. For today’s topic, we want to address the data breach that impacted a not commonly talked about market: pilots. We bring you an important update regarding a recent data breach that has affected job applicants to become pilots at American Airlines and Southwest Airlines. The breach occurred late April at the recruiting company Pilot Credentials, with American and Southwest Airlines being notified days later. Affected job seekers were eventually notified closer to the middle of June. 

According to regulatory filings, hackers gained unauthorized access to a database maintained by Pilot Credentials, compromising personal information such as names, birth dates, Social Security and passport numbers, and driver and pilot-license numbers of applicants for pilot and cadet positions. This breach has impacted nearly 6,000 applicants to American Airlines and approximately 3,000 applicants to Southwest Airlines, many of whom have been hired by the airlines. 

We want to emphasize that the breach was limited to the third-party vendor, and no internal systems or customer data of American or Southwest Airlines were affected. Both airlines have launched investigations and are working closely with the vendor to assess the extent of the unauthorized access and ensure the security of their pilot and cadet applicant data. 

Southwest Airlines has taken proactive steps to support the affected individuals, including providing complimentary credit monitoring services to those whose personal information was involved in the incident. They have also reported the incident to law enforcement. American Airlines, on the other hand, began notifying affected applicants late June and has also notified law enforcement. The Allied Pilots Association has stated that approximately 2,000 of its members were affected by the breach and expressed concerns about the delay in notifying the victims. 

At this time, it is crucial for all individuals affected by the breach to remain vigilant. We recommend monitoring your financial accounts, credit reports, and other sensitive information for any suspicious activity. Be cautious of any unsolicited communications or requests for personal information, as scammers may attempt to exploit this incident. 

We will continue to monitor this situation closely and provide updates as necessary. Your security and privacy remain our top priority, and we encourage you to take proactive measures to protect your personal information. 

If you have any questions or concerns, please do not hesitate to reach out to the respective airlines or consult with identity theft protection services. 

Stay informed, stay safe!

At a time when cyberattacks are becoming increasingly common, it's essential to remain vigilant and take necessary steps to protect your personal information. We recommend implementing safe cybersecurity practices such as using strong passwords, enabling multi-factor authentication, and keeping software up-to-date, among others.

We also suggest staying up-to-date on the latest cybersecurity news and trends to be aware of potential threats and vulnerabilities. We encourage you to subscribe to and Share our newsletter to receive regular updates and insights on the ever-changing cybersecurity landscape. Let’s continue to grow our community of cybersecurity techies!

Link to cybersecurity newsletter: https://cybereducation101.beehiiv.com/subscribe

#stayvigilant