Ankura CTIX FLASH Update - June 27, 2023

Malware Activity

Southwest Airlines and American Airlines Disclose Data Breach Due to Third-Party Vendor

Two of the largest airlines in the world, Southwest Airlines, and American Airlines, disclosed data breaches on June 23, 2023, due to the compromise of their third-party vendor Pilot Credentials. Pilot Credentials is an independent service provider that manages pilot applications and recruitment portals for the air transport industry. Southwest and American Airlines were informed of the Pilot Credentials compromise on May 3, 2023, where an unauthorized actor gained access to the vendor's systems on April 30, 2023, and exfiltrated documents. The documents involved data that was "provided by certain applicants in the pilot and cadet hiring process." Each airline submitted its own data breach notification, and American Airlines noted that the compromised data contains the following personal information: names and Social Security numbers (SSNs), driver's license