A threat actor claims to have breached American Airlines (AA), a major United States-based airline and one of the largest in the world. The post, dated September 23, 2025, alleges a significant data leak from the airline’s database, putting a substantial amount of customer information at risk.
According to the actor, the exfiltrated database affects 2 million users and contains a wide range of sensitive information. The compromised data allegedly includes full names, email addresses, city, state, zip code, phone numbers, account numbers, routing numbers, Social Security Numbers (SSN), dates of birth, and ID numbers.
