Personal information of 5,745 pilots of American Airlines and 3,009 pilots from Southwest Airlines has been leaked due to the incident. Credit: SoutherlyCourse / Getty A cybersecurity incident at a third-party vendor has impacted the personal information of pilots of at least two US airlines, including American Airlines and Southwest Airlines. Personal information, including name and social security number, driver's license number, passport number, date of birth, Airman Certificate number, and other government-issued identification numbers were compromised, according to breach notifications from the airlines. Breach at third-party vendor On May 3, both airlines were informed that their third-party vendor, pilotcredentials.com, had experienced a cybersecurity incident involving some files within its systems. An unauthorized actor accessed the third-party vendor's systems on or around April 30 and obtained certain files provided by some pilot and cadet applicants during their hiring process, the airlines said in their notifications. "The incident was solely limited to the third-party vendor's systems, and no American networks or systems were affected or compromised," American Airlines said in its breach notification, adding that the investigations were launched immediately and the law enforcement authorities were notified. Personal information of 5,745 pilots of American Airlines and 3,009 pilots from Southwest Airlines has been leaked due to the incident, according to the airline’s report to the Office of the Maine Attorney General. "Our investigation determined that the data involved contained some of your personal information, such as your name and Social Security number, driver's license number, passport number, date of birth, Airman Certificate number, and other government-issued identification numbers (s)," American Airlines said. Southwest Airlines insisted there is no evidence to suggest that the affected information was targeted or misused for fraud or identity theft. Meanwhile, the two airlines have suspended the use of third-party and, moving forward, pilot applicants are being directed to an internal portal managed by the airlines. As an additional precaution, both airlines have provided free identity protection membership that detects possible misuse of personal information. Earlier breach reported by American Airlines In July last year, American Airlines suffered another breach, when an unauthorized actor compromised the email accounts of a limited number of American Airlines team members. Personal information compromised in the incident included name, date of birth, mailing address, phone number, email address, driver's license, number, passport number, and certain medical information provided. The airline also suffered a data breach in March 2021 after hackers breached SITA servers and accessed the Passenger Service System used by various airlines across the globe. Related content news UK government plans 2,500 new tech recruits by 2025 with focus on cybersecurity New apprenticeships and talent programmes will support recruitment for in-demand roles such as cybersecurity technologists and software developers By Michael Hill Sep 29, 2023 4 mins Education Industry Education Industry Education Industry news UK data regulator orders end to spreadsheet FOI requests after serious data breaches The Information Commissioner’s Office says alternative approaches should be used to publish freedom of information data to mitigate risks to personal information By Michael Hill Sep 29, 2023 3 mins Government Cybercrime Data and Information Security feature Cybersecurity startups to watch for in 2023 These startups are jumping in where most established security vendors have yet to go. By CSO Staff Sep 29, 2023 19 mins CSO and CISO Security news analysis Companies are already feeling the pressure from upcoming US SEC cyber rules New Securities and Exchange Commission cyber incident reporting rules don't kick in until December, but experts say they highlight the need for greater collaboration between CISOs and the C-suite By Cynthia Brumfield Sep 28, 2023 6 mins Regulation Data Breach Financial Services Industry Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe