HackingTransportationEmploymentIdentity (basic)Government IDMediumContained

FRONTIER AIRLINES, INC.

bd_e689edfc5b27166b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 14, 2026

To disclose

—

Affected

27state residents only

Linked

6 filings

Confidence

64%

Full breach record for FRONTIER AIRLINES, INC. →3 incidents on file

Frontier Airlines issued a Massachusetts data breach notice (Ref 2026-1139) dated July 9, 2026. The incident involved unauthorized access to employee records containing PII, including SSNs, driver's license numbers, and passport/visa data. Frontier strengthened access controls, improved system monitoring, and provided 24 months of complimentary credit monitoring via Experian IdentityWorks to affected staff.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jul 14, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteexfilsquadbd_d3b86a21139336662026-07-26 · +12dVerified by operator

Regulatory filings (4) · sorted by filing gap

Texas State AGbd_8051a3d50d06dff82026-07-14Verified by operator
New Hampshire State AGbd_eeea7b4cc582ca0c2026-07-13 · +1dVerified by operator
Nebraska State AGbd_0974ef8675755c482026-07-09 · +5dVerified by operator
Vermont State AGbd_3790dc03c624bee32026-07-09 · +5dVerified

Name: FRONTIER AIRLINES, INC.
norm: frontier airlines
Domain: flyfrontier.com

Name: FRONTIER AIRLINES, INC.
norm: frontier airlines
Domain: flyfrontier.com

Discovered: —
Materiality determined: —
Notification sent: Jul 9, 2026
Affected individuals: 27state-resident count only
Data types: EmploymentIdentity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Strengthening access controls
Improving monitoring of our systems
Implementing other measures to safeguard information and enhance our ability to detect and respond to potential threats
Offering complimentary credit monitoring and other identity protection services through Experian IdentityWorks SM to all Frontier team members potentially affected by this incident
Changes made: Strengthening access controls
Improving monitoring of our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Nebraska State AGJul 9 · first

Vermont State AGJul 9 · first

New Hampshire State AG+4d

Texas State AG+5d

Massachusetts State AG+5d · this page

Pattern: first filing Jul 9 (NE), last Jul 14 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1139-frontier-airlines/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 14, 2026
Raw hash: 79d923fc7884ddf90cd8c85f09e78b93e5a1640747af716eff0fe1cb13cf8a30

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityFRONTIER AIRLINES, INC.

Victim entityFRONTIER AIRLINES, INC.

IncidentUnauthorized Access

Stated responseStrengthening access controls

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov