In June 2026, AireSpring, a US-based telecommunications and managed services provider, was reportedly subjected to a ransomware incident by the Chaos group. Third-party trackers reported the incident around June 9–10, 2026. However, AireSpring has not issued a public breach notification.
Third-party trackers indicate that 9,661 users, 1 employee, and 7 third-party employee credentials were compromised. Specific data types such as Social Security numbers, medical data, or financial data have not been identified. Additionally, the U.S. states affected have not been specified.
As of now, there is no official breach notification letter from AireSpring, no State Attorney General filing, and no class action lawsuit or multidistrict litigation. Details about the incident may emerge later, and official notices could be delayed.