HackingTransportation & LogisticsTransportationStolen CredentialsData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

FRONTIER AIRLINES, INC.

bd_eeea7b4cc582ca0c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 8, 2026

Filed

Jul 13, 2026

To disclose

5 weeks

Affected

11state residents only

Linked

6 filings

Confidence

65%

Full breach record for FRONTIER AIRLINES, INC. →3 incidents on file

Frontier Airlines notified the NH Attorney General of a data security incident affecting 11 New Hampshire residents. On June 8, 2026, Frontier became aware of potential unauthorized access. An investigation determined that an unauthorized third party accessed a data storage account on May 12 and June 3, 2026, potentially downloading personal information including names, addresses, SSNs, and driver's license numbers of Frontier employees. The incident is contained. Frontier engaged forensic investigators, notified law enforcement, secured the account, implemented security enhancements, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 27 days

discovery → filing · 5 weeks / 35 days

May 12, 2026

Begins

Jun 8, 2026

Discovered

Jul 13, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteexfilsquadbd_d3b86a21139336662026-07-26 · +13dVerified by operator

Regulatory filings (4) · sorted by filing gap

Texas State AGbd_8051a3d50d06dff82026-07-14 · +1dVerified by operator
Massachusetts State AGbd_e689edfc5b27166b2026-07-14 · +1dVerified by operator
Nebraska State AGbd_0974ef8675755c482026-07-09 · +4dVerified by operator
Vermont State AGbd_3790dc03c624bee32026-07-09 · +4dVerified

Name: FRONTIER AIRLINES, INC.
norm: frontier airlines
Domain: flyfrontier.com

Name: FRONTIER AIRLINES, INC.
norm: frontier airlines
Domain: flyfrontier.com
Industry: Transportation & Logisticsllm

Discovered: Jun 8, 2026
Breach occurred: May 12, 2026 – Jun 3, 2026
Undetected for: 27 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 9, 2026
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Initiated its incident response protocols
Notified law enforcement
Engaged a third-party cybersecurity firm to conduct a comprehensive investigation
Retained the services of a third-party forensics firm
Took steps to secure the affected data storage account
Conducted a comprehensive review of the data storage account
Changes made: Implemented security enhancements to address the identified risks
Strengthening identity and access controls
Restricting network exposure
Enforcing secure configuration standards
Improving monitoring and logging
Enhancing data protection capabilities
Implemented additional governance controls
Offering complimentary credit monitoring and other identity protection services through Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Nebraska State AGJul 9 · first

Vermont State AGJul 9 · first

New Hampshire State AG+4d · this page

Texas State AG+5d

Massachusetts State AG+5d

Pattern: first filing Jul 9 (NE), last Jul 14 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/frontier-airlines-20260713.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 13, 2026
Raw hash: 7102d69fe19c5a0585ae50760c631f1841a176bba585568acdfc68d4f60f5898

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityFRONTIER AIRLINES, INC.

Victim entityFRONTIER AIRLINES, INC.

Incidentdiscovered Jun 8, 2026

Stated responseInitiated its incident response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov