On November 8, 2022, CommuteAir, LLC experienced an external system breach (hacking) reported by the Maine Office of the Attorney General on November 17, 2022. The incident compromised the personal data of 2,856 individuals, including names, dates of birth, and the last four digits of Social Security numbers. While no credit card or health-related information was exposed, the breach posed risks of identity theft and fraud due to the sensitivity of the leaked partial SSNs. The attack affected 6 Maine residents specifically, though the broader impact included individuals beyond the state. The breach was classified as an unauthorized external intrusion, highlighting vulnerabilities in CommuteAir’s cybersecurity defenses. No ransomware was involved, and the exposed data was limited to personally identifiable information (PII) without financial or medical records.
TPRM report: https://www.rankiteo.com/company/commuteair
"id": "com017091825",
"linkid": "commuteair",
"type": "Breach",
"date": "11/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 2856,
'industry': 'Aviation (Regional Airline)',
'location': 'United States',
'name': 'CommuteAir, LLC',
'type': 'Private Company'}],
'attack_vector': 'External System Breach (Hacking)',
'data_breach': {'data_exfiltration': 'Likely (data was compromised)',
'number_of_records_exposed': 2856,
'personally_identifiable_information': ['Names',
'Dates of Birth',
'Last Four Digits of '
'Social Security '
'Numbers'],
'sensitivity_of_data': 'Moderate (PII, but no full SSNs or '
'financial/health data)',
'type_of_data_compromised': ['Personal Identifiable '
'Information (PII)']},
'date_detected': '2022-11-08',
'date_publicly_disclosed': '2022-11-17',
'description': 'On November 17, 2022, the Maine Office of the Attorney '
'General reported a data breach involving CommuteAir, LLC that '
'occurred on November 8, 2022. The breach was characterized as '
'an external system breach (hacking), affecting 2,856 '
'individuals in total, with 6 residents of Maine specifically '
'impacted. The compromised information included names, dates '
'of birth, and the last four digits of social security '
'numbers, while credit card and health-related information was '
'not involved.',
'impact': {'data_compromised': ['Names',
'Dates of Birth',
'Last Four Digits of Social Security Numbers'],
'identity_theft_risk': 'Potential (due to exposed PII)',
'payment_information_risk': 'None (credit card information not '
'involved)'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Public disclosure via Maine Office of '
'the Attorney General'},
'title': 'CommuteAir, LLC Data Breach (November 2022)',
'type': 'Data Breach'}