2026 Frontier Airlines — data storage breach; 11,482 employees/passengers

Frontier Airlines confirmed unauthorized third-party access to a data storage account holding personal information. Trade press citing the Texas Attorney General breach database reports access from May 12 through June 3, 2026, discovery on June 18, and 11,482 affected people (employees and customers), with data types including names, addresses, SSNs, driver's licenses / government IDs, and dates of birth. Vermont AG security-breach notices list a July 9, 2026 Frontier filing affecting 6 Vermont residents with Social Security numbers. Frontier said it initiated incident response, notified law enforcement, engaged a third-party cybersecurity firm, and found no evidence of continuing access; notification of affected individuals was underway as of mid-July 2026 coverage. Extortion group Scattered Lapsus$ Hunters claimed credit and a ransom demand in lawsuit/press summaries—treat actor marketing details beyond company/regulator facts cautiously. Two proposed class actions were filed in Colorado federal court (employee Beach complaint and passenger Bennett complaint) alleging inadequate cybersecurity. Note (Jul 2026 correction): ShinyHunters publicly denied Scattered Lapsus$ Hunters attribution for this airline incident. A separate Jul 26 ExfilSquad leak-site claim (~2.4M records / Power Apps Dataverse) is catalogued as frontier-exfilsquad2026 (unverified).