HackingTransportation & LogisticsTransportationStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDHighContained

Air Canada

bd_27c299514b11f815 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 22, 2018

Filed

Aug 31, 2018

To disclose

9 days

Affected · nationwide

20,0002 in this filing

Linked

2 filings

Confidence

65%

Full breach record for Air Canada →5 incidents on file

Air Canada reported unauthorized access to approximately 20,000 Mobile+ App user profiles between August 22-24, 2018. Attackers used valid credentials to access basic profile data (name, email, phone) and government ID numbers (passport, NEXUS). Two New Hampshire residents were affected. Accounts were locked and enhanced password policies implemented.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 days

Aug 22, 2018

Begins

Aug 22, 2018

Discovered

Aug 31, 2018

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_130c530c6d3d5bd42018-08-29 · +2dCandidate

Name: Air Canada
norm: air canada
Domain: aircanada.com

Name: Air Canada
norm: air canada
Domain: aircanada.com
Industry: Transportation & Logisticsllm

Discovered: Aug 22, 2018
Breach occurred: Aug 22, 2018 – Aug 24, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 29, 2018
Affected individuals: 20,000state + nationwide
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Took immediate action to investigate and to start blocking these attempts
Implemented protocols to enhance detection and further protect against repeated or broader cyberattacks
Locked all Air Canada mobile App accounts to protect our customers’ data
Sent notification to affected users on August 29, 2018
Changes made: Implemented enhanced security measures requiring stronger passwords
Implemented fewer unsuccessful attempts to log in before the account will be locked
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 days(9 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGAug 29 · first

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/air-canada-20180831.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 31, 2018
Raw hash: b94d271968ce74fa2f378b520bbea6f5ded1cd199e695bca6077cff51e0b7d69

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAir Canada

Victim entityAir Canada

Incidentdiscovered Aug 22, 2018

Stated responseTook immediate action to investigate and to start blocking these attempts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov