Frontier Airlines disclosed a data breach on or about July 9, 2026, stemming from unauthorized third-party access to a data storage account. The company notified the Vermont Attorney General of the incident on July 9, 2026, and initiated incident response protocols, contacted law enforcement, and engaged a third-party cybersecurity firm.
The breach may have involved names, Social Security Numbers, dates of birth, addresses, government IDs, and potentially medical and financial information. While the incident affects customers across the United States, the total number of affected individuals remains undisclosed. Preliminary reports link the incident to the Scattered Lapsus$ Hunters ransomware group.
Frontier Airlines, operating as Frontier Airlines Group, Inc. (NASDAQ: FDXG), is in the process of notifying affected individuals. A separate API vulnerability exposed in June 2026, involving passport numbers, credit card details, and addresses, is distinct from this July data storage account breach. Official notification letters are expected soon.