Delta Air Lines, Inc.

Delta Air Lines' 2025 Form 10-K Item 1C cybersecurity disclosure describes its risk-management program, governance structure, and Board/Audit Committee oversight. Delta states it has not experienced any material cybersecurity incidents in the last three fiscal years, and any related expenses were immaterial. No specific breach incident is disclosed in this filing.

Delta Air Lines, Inc. reported a data breach to the Hawaii Office of Consumer Protection. The office was notified on 2018/04.26. Breach type: Hackers/Unauthorized Access. 2,831 Hawaii residents were affected. Recovered from the Internet Archive after the notice was removed from the OCP table.

Delta Air Lines, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2018-04-13. The breach occurred during 9/26/2017 - 10/12/2017. The breach was discovered on 3/28/2018. 825,000 individuals were affected. Notice was sent on 4/11/20184/12/2018.

Delta Air Lines, Inc. reported a data security breach to the California Attorney General. The incident occurred between September 26, 2017, and October 12, 2017. Approximately 74,541 California residents were potentially impacted. The specific nature of the breach and data types are not detailed in the provided summary fields, but PII is assumed affected. No discovery date or specific attack vector is disclosed in the available metadata.

Delta Air Lines reported a data breach to the Montana Attorney General. The breach was reported on 2018-04-12. The breach occurred from 9/26/2017 to 10/12/2017. 6,310 Montana residents were affected.