CommuteAir •

CommuteAir, LLC reported an external system breach (hacking) occurring on January 15, 2023, discovered on January 17, 2023. The incident affected 1,473 individuals, including 3 Maine residents. Affected data included names and personal identifiers. The company provided electronic notification and offered 12 months of Life Lock identity theft protection services.

CommuteAir, LLC notified the New Hampshire Attorney General on January 24, 2023, of a cybersecurity incident discovered on January 17, 2023. A security researcher identified an unsecured development server containing employee PII, including names, DOBs, addresses, and partial SSNs. Four New Hampshire residents were affected. CommuteAir took the server offline, reset credentials, engaged Mandiant for forensic analysis, and reported the incident to CISA.

CommuteAir, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2023-01-23. The breach occurred from 1/17/2023 to 1/18/2023. 1 Montana residents were affected.

CommuteAir, LLC. reported that on November 9, 2022, an unauthorized individual gained access to a third-party HRIS via an API. The incident involved employee names, dates of birth, and the last four digits of SSNs. CommuteAir engaged cybersecurity consultants, notified law enforcement, and offered one year of identity theft protection.

CommuteAir, LLC, a commercial airline, reported an external system breach (hacking) that occurred on November 8, 2022, and was discovered the following day. The breach compromised the names and Social Security numbers of 2,856 individuals, including 6 residents of Maine. In response, the company provided electronic notification to the affected individuals on November 17, 2022, and offered 12 months of identity theft protection services through LifeLock.

CommuteAir, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2022-11-17. The breach occurred from 11/8/2022 to 11/9/2022. 1 Montana residents were affected.