Frontier Airlines data breach reported on social platforms
Reports of a potential Frontier Airlines breach circulate across Reddit, Hacker News, and Mastodon.
What to know
- A data breach at Frontier Airlines was reported on Reddit on November 1, linked to an email scam.
- The report gained traction on Hacker News (108 points, 27 comments) and spread to Mastodon.
- No official statement from Frontier Airlines or confirmation of the breach details is present in available material.
Frontier Airlines Airline subject of breach report
How it unfolded 2 developments, newest first · click a bar or a number to jump articlesposts
-
2
Breach report spreads to Mastodon
The Frontier Airlines breach allegation begins circulating on Mastodon as users share the Reddit discussion link.
-
https://pwn.watchhttps://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...> it feels like we're actively witnessing a corporate reckoning around security posture the likes of which has never occurred.As a cyber person, I agree. The theater has met reality, and those who put in…
2 more of the top 3 · 12 posts in this stretch
-
H
Frontier air likely compromised https://www. reddit.com/r/frontierairlines/ comments/1xl20e8/psa_email_scam/
-
Norwegian cruise line had a similar thing recently with emails going out with actual booking information. Basically identical to the frontier scam emails. I wonder if there’s some customer service software that’s being exploited that they both use.Edit: some info from the NcL one with screenshots that look similar
-
-
1
Frontier Airlines breach reported on Reddit
A post titled "Frontier Airlines Likely Breached" appears on r/frontierairlines, referencing an email scam and gaining 108 points with 27 comments on Hacker News.
-
2 outlets Frontier Airlines Likely Breached
first by HN Best, 9d ago · also HN Frontpage
-
Various users are reporting scam emails with full booking details.Stay safe guys.
-
What people are saying 9 voices from 1 site · best of 13 · verbatim
- Nov 1
-
Only 2 breaches/critical remote CVEs on HN frontpage today? Must be a slow news day lol!
-
The corporate reckoning will only come if there's actual consequences for any of this. There haven't been any when this was happening to one big company a month, there won't be any when it starts happening to five big companies a day.
-
For anyone else who has never heard of it: Frontier Airlines is a budget airline company based in Colorado USA.
-
Someone found a vulnerability in the system of Hong Kong Airlines that let the user to see the details of another passenger by changing a few characters in the URL. He reported the issue to the airlines. Then he was prosecuted and found guilty for hacking.Tells you a lot about the attitude of many cooperations about these vulnerabilities.
-
My guess is something related to looking up Frontier flight status was abused to enumerate all active flight itineraries.If Frontier had been completely breached and all data compromised, there's likely more lucrative things the attacker can do than just using the data to enhance their credit card stealing phishing attack.
-
The "All modern digital infrastructure" xkcd (https://xkcd.com/2347/) where they had a fragile tower of blocks needs an update where those blocks are now collapsed on the floor in a complete mess.
-
Earlier this year, Frontier was one of the orgs that got their data leaked thanks to incorrectly configured security settings on their Microsoft Power Pages based website. While this is unlikely to be the source for current flight confirmation numbers, such data could sure help in phishing operations.
-
I'm not sure there will be corporate reckoning. Unless security breaches come with business impacting consequences, they will continue to ignore it and just pay out occasional class action lawsuit.
-
It seems early to speculate, but if this is related to the massive uptick in CVEs we've been seeing recently it feels like we're actively witnessing a corporate reckoning around security posture the likes of which has never occurred.