2026 Frontier Airlines — ExfilSquad Power Apps / Dataverse claim (unverified)
Data compromised
Actor-claimed ~43GB / ~2.4M records including support tickets, customer-support emails (~1.8M), ~2M unique emails, flight/travel/baggage/complaint data — Frontier had not confirmed this claim at indexing
Technical writeup
Unverified extortion / leak-site claim — July 26, 2026. ExfilSquad listed Frontier Airlines claiming ~43GB uncompressed (~2.4M records) from a customer-support portal via improperly configured Power Apps/Dynamics 365 Dataverse permissions (589,554 support tickets, 1,836,608 support emails, ~2M unique emails per actor statement to DataBreaches.net). Deadline to contact cited as Aug 5. Distinct from Frontier’s confirmed May 12–June 3, 2026 storage-account breach affecting 11,482 people (frontier-airlines-scatteredlapsus2026). Frontier had not replied to DataBreaches queries about the ExfilSquad listing at publication. ShinyHunters denied Scattered Lapsus$ Hunters involvement in the airline incident.
Root cause
Unverified ExfilSquad leak-site claim of Microsoft Power Apps/Dynamics 365 Dataverse misconfiguration dump from customer-support portal — distinct from confirmed May–Jun storage breach (~11.5k)