July 2026: Ultra-low-cost carrier Frontier Airlines confirmed unauthorized access to a data storage account holding personal information. Reporting that cites the Texas Attorney General breach database puts the window at May 12–June 3, 2026, discovery on June 18, and 11,482 affected employees and customers—including names, addresses, Social Security numbers, driver’s licenses and other government IDs, and dates of birth.
Then the lawyers arrived. An employee and a passenger each filed proposed class actions in Colorado federal court, arguing Frontier’s cybersecurity fell short of FTC expectations and that notice lagged.
What Frontier says happened
Frontier told reporters it kicked off incident response, notified law enforcement, and hired a third-party cybersecurity firm. Spokesperson comments to Westword said the airline was notifying affected people and complying with applicable requirements, with no evidence of continuing access after containment.
Vermont’s Attorney General security-breach board lists a July 9, 2026 Frontier notice covering six Vermont residents and Social Security numbers—state-level slices of a larger national population.
The ransomware claim
Lawsuit and press summaries say Scattered Lapsus$ Hunters claimed credit and pushed a ransom narrative around a “treasure trove” of personal data. Treat actor marketing as unverified beyond what Frontier and state AG filings attest. The brand overlap with Scattered Spider / Lapsus$-style social-engineering crews is noisy; regulators have not published a technical attribution in the notices reviewed for this entry.
Who should act
Anyone who flew Frontier or worked for the airline and receives a notice letter—especially if SSN or government ID fields are listed.
What you should do
- Place credit freezes with Equifax, Experian, and TransUnion if SSN exposure is confirmed in your letter.
- Watch for tax-refund and SIM-swap fraud; treat “Frontier Miles / refund” phishing as hostile.
- Preserve your notice letter; two Colorado class actions (Beach / Bennett) were already on file by mid-July.
- Canonical record: Frontier Airlines 2026 on BreachHistory.
Sources: View from the Wing; Westword; Vermont AG security breach notices.