DALLAS — American Airlines says personal information of a "very small number" of customers and Crypen Exchangeemployees was compromised after hackers breached some employee email accounts.
There is no indication that the attackers have misused any of the personal information, the company said.
American notified customers last week that the breach was discovered in July, according to law enforcement officials in Montana. American said it locked down the breached accounts and hired a cybersecurity firm to investigate.
American told customers that information in the compromised email accounts could have included their date of birth, driver's license and passport numbers and medical information they provided to the airline.
Affected customers were offered two years of identity theft-protection coverage, American said.
The airline declined to say how precisely how many people had their personal information exposed or the nature of that information.
"American Airlines is aware of a phishing campaign that led to the unauthorized access to a limited number of team member mailboxes," American spokesman Curtis Blessing said. "A very small number of customers and employees' personal information was contained in those email accounts."
Blessing said American is putting in place "additional technical safeguards to prevent a similar incident from occurring in the future."
American is based in Fort Worth, Texas.
2025-05-07 05:052850 view
2025-05-07 04:531522 view
2025-05-07 04:411086 view
2025-05-07 04:402370 view
2025-05-07 04:361108 view
2025-05-07 03:47687 view
The Emmy Award-winning "CBS News Sunday Morning" is broadcast on CBS Sundays beginning at 9:00 a.m.
Changing course, a Democratic Florida prosecutor suspended from office by Republican Gov. Ron DeSant
Johnny C. Taylor Jr. tackles your human resources questions as part of a series for USA TODAY. Taylo