HackingTransportation & LogisticsTransportationSupply Chain (3P Vendor)Customer Data InvolvedGovernment IDIdentity (basic)MediumContained

Jet Aviation

bd_d402c363b8c0d57a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 10, 2021

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Jet Aviation →

Jet Aviation notified customers of a data incident involving its third-party scheduling software provider, Avianis. The incident, occurring on December 6, 2020, potentially compromised personally identifying information including passport, travel visa, and driver's license details. Jet Aviation offered complimentary identity monitoring services to affected customers. The cause was attributed to a vulnerability in the third-party system.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 6, 2020

Begins

Feb 10, 2021

Filed

This filing is one of 2 about the same incident.View merged incident

Part of Avianis supply-chain incident (2021) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_b741060a806ea04b2021-02-16 · +6dVerified

Name: Jet Aviation
norm: jet aviation
Domain: jetaviation.com

Name: Jet Aviation
norm: jet aviation
Domain: jetaviation.com
Industry: Transportation & Logisticsllm

Discovered: —
Breach occurred: Dec 6, 2020
Materiality determined: —
Notification sent: Dec 29, 2020
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
Regulator citations: Avianis notified local and Federal authorities of the incident
Third party: via Avianis
Initial access: supply_chain

During the incident: Working closely with Avianis to ascertain the impact and determine next steps
Offering cost-free data monitoring services through ID Watchdog
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGFeb 10 · first · this page

New Hampshire State AG+6d

Pattern: first filing Feb 10 (CA), last Feb 16 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-537901
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 10, 2021
Raw hash: e63b09a3dd06315722ca51fdb91d7f988c57418ff6043a63a94402b3fdd983c3

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityJet Aviation

Victim entityJet Aviation

IncidentThird-Party / Supply Chain

Stated responseWorking closely with Avianis to ascertain the impact and determine next steps

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov