American Airlines Group Inc.

American Airlines, Inc. notified Montana residents of a cybersecurity incident involving third-party vendor pilotcredentials.com. An unauthorized actor accessed vendor systems on or around April 30, 2023, obtaining pilot and cadet applicant data including names, SSNs, driver's licenses, and passport numbers. American discovered the incident on May 3, 2023, notified law enforcement, and offered two years of Experian IdentityWorks. Notices were sent June 23, 2023.

American Airlines, Inc. experienced an external system breach (hacking) that occurred from April 30, 2023, to May 1, 2023. The breach was discovered on May 3, 2023. The compromised information includes names in combination with Driver's License or Non-Driver Identification Card Numbers. A total of 12 Maine residents were affected. American Airlines is offering 24 months of complimentary identity fraud and credit theft protection services from Experian.

American Airlines, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-23. 38 Massachusetts residents were affected. The report records the breach type as electronic.

American Airlines, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-04-30 and was reported on 2023-06-23. 75 Indiana residents were affected. 5,745 individuals affected in total.

American Airlines, Inc. notified the NH Attorney General of a phishing incident affecting approximately 8 NH residents. Unauthorized actors compromised employee email accounts to send phishing emails and potentially accessed mailbox contents containing PII (SSN, DOB, driver's license) and limited medical info. Notices sent Sept 16, 2022, offering 2 years of Experian IdentityWorks.

American Airlines, Inc. and its subsidiaries Envoy Air and Piedmont Airlines reported an external system breach (hacking) that occurred between July 3, 2022, and July 7, 2022. The breach was discovered on August 16, 2022, and affected 5 Maine residents. The compromised information includes names in combination with Driver's License or Non-Driver Identification Card Numbers. The company offered identity theft protection services through Experian's IdentityWorksSM.

American Airlines, Inc. notified Montana residents that in July 2022, unauthorized actors compromised the email accounts of a limited number of team members via phishing. The incident may have exposed personal information including names, DOBs, driver's license numbers, passport numbers, and medical information. No evidence of misuse was found. The company secured accounts, engaged forensic investigators, and offered two years of Experian IdentityWorks.

American Airlines and its subsidiaries Envoy Air and Piedmont Airlines reported a data breach to the Indiana Attorney General. The breach occurred on 2022-07-03 and was reported on 2022-09-16. 5 Indiana residents were affected. 1,708 individuals affected in total.

aa.com

American Airlines reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-10-15. 10 Massachusetts residents were affected. The report records the breach type as paper.

American Airlines, Inc. reported a data security breach to the California Attorney General. The breach occurred on December 30, 2014. The provided source document contains only the filing metadata and an empty attachment placeholder; no narrative details regarding the nature of the breach, data types affected, or number of individuals impacted are available in the text content.

AMR Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-07-06. 926 Massachusetts residents were affected. The report records the breach type as electronic.