FlightAware
Disclosed Aug 13, 2024Confirmed
FlightAware configuration error exposes customer data including SSNs
Flight tracking site FlightAware said a configuration error identified on July 25, 2024 exposed customer names, emails, addresses, IP addresses, phone numbers, partial card numbers, aircraft and pilot details and, for some, Social Security numbers.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Aug 13, 2024 |
| Discovered | Jul 25, 2024 |
| Happened | Jan 1, 2021 |
| Attack | Exposed data |
| Data exposed | NamesEmailsAddressesIP addressesPhone numbersSocial Security numbersPayment cardsOther |
| Sector | Transport · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
other to transportby seedSource
hacking to misconfigurationby seedSource
[] to ["names","emails","addresses","ip-addresses","phone","ssn","payment-card","other"]by seedSource
empty to Flight tracking site FlightAware said a configuration error identified on July 25, 2024 exposed customer names, emails, addresses, IP addresses, phone numbers, partial card numbers, aircraft and pilot details and, for some, Social Security by seedSource
empty to FlightAware configuration error exposes customer data including SSNsby seedSource
unknown to hackingby backfillSource
empty to 2024-07-25by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.