Hackers accessed data on some American Airlines customers

FILE - In this May 28, 2020, file photo, a passenger wears personal protective equipment on a Delta Airlines flight after landing in Minneapolis, United States of America. The European Union Aviation Safety Agency said Wednesday that from next week onward it is no longer recommending the use of medical masks at airports and on planes due to the coronavirus. (AP Photo/John Minchillo, File) (John Minchillo, Copyright 2020 The Associated Press. All rights reserved.)

DALLAS – American Airlines says personal information of a “very small number” of customers and employees was compromised after hackers breached some employee email accounts.

There is no indication that the attackers have misused any of the personal information, the company said.

Recommended Videos



American notified customers last week that the breach was discovered in July, according to law enforcement officials in Montana. American said it locked down the breached accounts and hired a cybersecurity firm to investigate.

American told customers that information in the compromised email accounts could have included their date of birth, driver’s license and passport numbers and medical information they provided to the airline.

Affected customers were offered two years of identity theft-protection coverage, American said.

The airline declined to say how precisely how many people had their personal information exposed or the nature of that information.

“American Airlines is aware of a phishing campaign that led to the unauthorized access to a limited number of team member mailboxes,” American spokesman Curtis Blessing said. “A very small number of customers and employees’ personal information was contained in those email accounts.

Blessing said American is putting in place “additional technical safeguards to prevent a similar incident from occurring in the future.”

American is based in Fort Worth, Texas.

___

This story was previously corrected to show that American Airlines said it had no indication that hackers have misused any of the personal information.


Recommended Videos