FlightAware Data Breach Happened Due To Configuration Error

The renowned flight-tracking tool FlightAware has notified its users about a data breach that has been ongoing for several years. FlightAware attributed a configuration error as the cause of this security lapse.

FlightAware Data Breach Spans Across Several Years

FlightAware recently uncovered a data breach involving the personal information of its customers. Following the discovery and subsequent security flaw fix, the service has now made the incident public.

As per the breach notification, the service identified a configuration error on July 25^th, 2024, which exposed account details of FlightAware customers. This includes users’ account passwords, email addresses, and user IDs.

Consequently, this account detail jeopardized users’ personal data, depending on the extent of information users had shared. The breached data encompasses users’ names, shipping addresses, contact numbers, birth dates, billing information, credit card details, and associated social media accounts. Additionally, the breached data also includes users’ account activity details, aircraft owned, pilot status, and industry.

While the explicit details already indicate the significant impact of this data breach for FlightAware users, the company disclosed further information in a separate notice to the Office of the Attorney General, State of California Department of Justice. According to the notification, the breach occurred on January 1, 2021, exposing users’ details over several years, including their Social Security Numbers.

Users Asked To Reset Passwords

FlightAware rectified the configuration error upon discovering the breach to halt the data exposure. However, as a precautionary measure, the service also reset users’ passwords to prevent potential unauthorized access.

Furthermore, FlightAware advises users to take necessary steps to safeguard their personal information from potential misuse and identity theft. These steps include reviewing bank account statements and credit reports proactively, promptly reporting any fraudulent activities to the FTC and law enforcement agencies, and obtaining credit reports from relevant services like Equifax or Experian for a thorough review.

As a gesture of goodwill, the flight-tracking service is offering affected customers a two-year credit monitoring service free of charge.

We welcome your thoughts in the comments.