Illustration: The Touch & Go
Frontier Airlines Faces Data Breach Investigation Amid Cybersecurity Concerns
Frontier Airlines disclosed a possible data breach last week, prompting legal and security probes into potential exposure of sensitive customer information.
The gist
Frontier Airlines is under legal scrutiny following a cybersecurity incident that may have exposed customers’ personal data.
Continuing coverage
All Frontier Airlines →Frontier Airlines has revealed a potential cybersecurity breach, triggering investigations into the scope and impact of the incident. The Denver-based ultra-low-cost carrier informed the Vermont Attorney General of the issue late last week but provided limited details about the exact nature or scale of the data exposure. This information scarcity has led to increased concerns over customer data security and sparked legal interest from class action law firms.
National law firm Edelson Lechtzin LLP has initiated a formal investigation, seeking to identify affected individuals and explore legal remedies for what they describe as Frontier Airlines’ failure to safeguard its customers’ personal data. The firm’s probe follows similar investigations launched in recent years targeting airlines that have fallen victim to widespread cybersecurity breaches involving third-party service providers.
The airlines sector has seen a rising trend of cyber incidents linked to a commonly used third-party IT platform for customer service, implicating several major carriers worldwide. Notably, Air France and KLM Royal Dutch Airlines notified customers in August of the previous year about a breach that exposed names, contact details, frequent flyer statuses, and email subject lines linked to customer service interactions. The platform involved was supplied by Salesforce, a US-based company.
Although these breaches generally did not compromise sensitive financial information such as credit card numbers or passports, cybersecurity experts warn that the stolen data still poses significant risks. Identity theft scams exploiting such information can be highly sophisticated, leading to serious privacy violations for customers involved.
The recent wave of cybersecurity threats against the airline industry extends beyond data leaks. Groups like the notorious Scattered Spider employ advanced social engineering tactics, manipulating IT helpdesks into granting unauthorized access by impersonating locked-out employees. This method bypasses traditional hacking techniques and exploits human vulnerabilities in security protocols.
Other airlines, including Hawaiian Airlines and WestJet, have also reported data breaches linked to these and similar attacks. While these incidents have not yet disrupted flight operations, their potential ramifications for passenger privacy and trust remain substantial. The airline industry faces mounting pressure to bolster defenses against increasingly crafty cyber adversaries.
Past cybersecurity events highlight the severe operational consequences that can accompany breaches. In September of the previous year, a cyberattack crippled the Collins Rockwell Muse check-in system used by multiple major European airports including London Heathrow and Berlin Brandenburg. The failure caused widespread flight cancellations and delays over several days while engineers worked to restore functionality.
Additionally, in 2024, Seattle-Tacoma International Airport experienced a ransomware attack attributed to the Rhysida hacker group, which incapacitated check-in and baggage handling systems as well as terminal information displays. The airport authority refused to pay ransom demands and committed to strengthening cybersecurity measures to prevent future attacks.
Frontier Airlines has not issued a detailed response to requests for comment on the data breach or ongoing investigation. The situation underscores an urgent need for vigilance and improvement in cybersecurity practices within the air transport sector to protect passenger data and maintain operational integrity.
Frequently asked questions
- What details have been revealed about Frontier Airlines' data breach?
- Frontier Airlines disclosed a potential data breach to the Vermont Attorney General but has not provided specific details on the number of affected customers or what data was compromised.
- What legal actions have been initiated in response to the Frontier breach?
- Class action law firm Edelson Lechtzin LLP has launched an investigation aiming to identify victims and possibly bring a lawsuit against Frontier for failing to protect customer data.
- How does this breach relate to wider cybersecurity issues in the airline industry?
- The breach is part of a pattern of cyberattacks affecting airlines globally, often linked to vulnerabilities in third-party customer service IT platforms, with concerns about identity theft and social engineering attacks escalating in the sector.
Read more
All Aviation Safety →
Deaf Man Sentenced to 18 Months for Targeting Delta Pilot with Laser Pointer Near Buffalo Airport
A deaf man from Cheektowaga, New York, has been sentenced to 18 months in a federal prison after he pleaded guilty to aiming a laser pointer at the pilot of a Delta Air Lines plane, which was on its final approach to land at Buffalo Niagara International Airport. 31-year-old Joseph L. Crapsi had been fighting the prosecution brought by the Assistant U.S. Attorneys Charles M. Kruly and Craig R. Gestring following an investigation by the Niagara Frontier Transportation Authority Police Department and the FBI. Crapsi’s attorneys had asked the court to suppress evidence that the laser pointer was found in his bedroom and objected to a finding that police had probable cause to arrest him. In the end, however, the court found that the police were within their rights to arrest him, and the laser pointer was used in evidence. The case stemmed from an incident on the night of March 2, 2024, when Delta flight DL-2334 was coming into land. The final approach path saw the jet fly close to Crapsi’s house in Cheektowaga, just a few miles from Buffalo Niagara Airport. Following the incident, the pilot reported the ‘laser strike’ to police, who started making enquiries in the area that the crew said the laser was coming from. One of Crapsi’s neighbors told officers that they saw a laser shining through his window on ‘multiple occasions.’ Given that the laser was seen shining into the sky, the court ruled that this was sufficient to meet the low standard of probable cause. Officers knocked at Crapsi’s address and were invited inside. They went with him to his bedroom, where they noticed a laser pointer ‘in plain sight.’ The laser pointer was seized as evidence, and Crapsi was arrested. Crapsi eventually pleaded guilty to aiming a laser pointer at an aircraft contrary to 18 U.S. Code § 39A, which carries a maximum sentence of five years imprisonment. Late last week, U.S. District Judge Lawrence J. Vilardo sentenced Crapsi to 18 months’ imprisonment. In 2023, there were a record 13,304 laser pointer incidents reported across the United States – an increase of nearly 80% compared to 2016. The number of incidents have, however, slightly decreased in recent years. In 2024, there were 12,840 reported laser incidents, and 10,993 were reported in 2025. So far this year, there have been 3,325 incidents up to the end of June. It was made illegal to aim a laser pointer at aircraft in 2012, following a dramatic rise in the number of incidents being reported by pilots. The Federal Aviation Administration (FAA) reports that the vast majority of laser strikes occur on Fridays and Saturdays, with a noticeable increase in reports during the months of October and November. Laser incidents can temporarily blind and injure pilots. In one incident involving a Virgin Atlantic flight from London to Tel Aviv, Israel, the pilots had to return to London because the pilot’s vision got progressively worse and he was only able to see out of one eye.
Cirrus Debuts SF50 G3 Vision Jet With Advanced Avionics and Enhanced Comfort
It was in the middle of a flight to explore the capabilities, handling, and operating envelope of the Cirrus SF50 G3 Vision Jet that it happened. Ensconced at FL 220, a modest height for a jet with a max operating altitude of FL 310, with the features of the Garmin Perspective Touch+ automation gracefully keeping the aircraft in the proper groove in the sky, I finally had time to simply look around and enjoy the experience. My overall impression was that the large flight deck and cabin windows allowed me to see much more of the sky, the world, and the airframe of this jet than I ever have in an airplane that didn't have a bubble canopy. The air was dead smooth, and despite a ground speed north of 300 knots, it felt as if the flying machine were suspended in the sky, with the earth turning beneath us. I was seated as comfortably as I have been in any aircraft, savoring the extent of the view when it hit me. This Article First Appeared in FLYING Magazine If you're not already a subscriber, what are you waiting for? Subscribe today to get the issue as soon as it is released in either Print or Digital formats. Subscribe Now I was on a magic carpet, every bit as luxurious and capable as those of ancient tales. All that remained was for adventures to begin as it carried me forward. Vision Jet Development How did a general aviation manufacturer get here, delivering over 700 of the first general aviation, single-engine, single-pilot personal jets with the Cirrus Airframe Parachute System (CAPS)? Cirrus did it the same way musicians get to Carnegie Hall, with practice, hard work, progressive thinking, and a plan for the future. Cirrus succeeded where at least seven other companies did not. Even before the Vision Jet became hopeful drawings, the manufacturer was designing its SR Series (SR20, SR22, SR22T) with flight decks, performance profiles, and sophisticated avionics with the goal of making it realistic for a competent SR pilot with significant IFR experience to step up into its planned but as yet undesigned jet. In 2007 Cirrus principals Dale and Alan Klapmeier began publicly talking about "the jet" that was being designed in what they called the company's "Moose Works" in Minnesota. It was to be similar to the SR series and capable of being stored in the same 40-by-40 hangar that could house a Cirrus SR22. READ MORE: We Fly: ScaleWings SW-51 Is So Real, It's Surreal READ MORE: We Fly: Pilatus PC-12 Pro An early prototype was flown in 2008, a bad time for general aviation overall, so it was not until 2014 that there was enough capital to build and fly a conforming prototype. In 2016 the first production SF50 flew, the jet received FAA type-certification, and deliveries began. Since then, Cirrus has shown that pilots with experience in high-performance, piston-engine airplanes can step up into the SF50, pass the type rating practical exam on the first try, and safely operate the jet in the real world. Cirrus has also made upgrades to the Vision Jet, most notably with the G2 in which it upped its maximum altitude from FL 280 to FL 310, bumped max cruise up to 317 ktas, and installed the Garmin Perspective Touch+ integrated flight deck. Along the way, "Safe Return Emergency Autoland," Garmin's Autoland, was added and payload and performance boosted. G3 Vision Jet Model In February, Cirrus announced and began deliveries of the G3 Vision Jet with some 30 enhancements, primarily to increase the capabilities of the avionics, visibility of the plane, and comfort for those in the cabin. Without attempting to go into all the G3 improvements, I'll look at some that grabbed my attention. From an operational and pilot workload perspective, the ATC Data Link (Cirrus also uses the acronym CPDLC for Controller-Pilot Data Link Communication) system, allowing text communications between a controller and the jet, is way up there in providing support to a pilot. The pilot initiates contact with ATC through the CPDLC and starts receiving clearances, new radio frequencies, altitudes and routes via text message. A tone alerts the pilot to an incoming message. The pilot reads it, decides if it can be complied with and, if so, taps the Wilco and send buttons. If unable to comply, the pilot can say so and explain why, just as we do now via voice—except this is faster. Plus, the message is saved, so the pilot has, for example, the route clearance written out in much better handwriting of their own. Ergonomic leather seats are notably comfortable on the Cirrus SF50 G3 Vision Jet. [Credit: Erin Armstrong] If desired, the pilot can tell the system to load the clearance into the Garmin automation, setting up the route, initial altitude, and additional information. The pilot then just confirms that everything loaded correctly and activates the change. En route, a call to change frequencies doesn't take up airtime, the pilot sees the frequency written (less chance of loading it incorrectly), punches Wilco and send to confirm receipt and compliance, and has the new frequency loaded into the appropriate comm radio in either the standby or active position. It's delightfully easy, and there's no back and forth with a controller trying to get the numbers right. Another new feature is a time-saver anyone operating an aircraft should like—all databases are automatically updated while the Vision Jet is parked with Cirrus IQ Pro Advanced. Alerts-linked checklists are almost a third hand for a single pilot when something out of the ordinary pops up. In the event the electronic alerting system advises them of an abnormal or emergency event, it also pulls up the appropriate checklist—no more pulling out a thick binder and finding the appropriate one. As the pilot deals with each checklist item, they use the scroll wheel to track and then click on it, and the cursor moves to the next item. That continues until the checklist is complete and the situation has been handled or it's time to put the jet on the ground—and the electronic checklist provides guidance for that as well. Having used Garmin's Taxiway Routing and 3D SafeTaxi in other aircraft, I'm glad to see that safety feature in the Vision Jet. No matter how many times I've gotten into a Vision Jet, I am always mildly surprised how big the cabin is. For the G3, Cirrus has made even better use of the space. Until now, the SF50 could hold five adults and two kids—one adult in the center of the rear bench seat flanked by the two children. All the passenger seating has been reworked. The rear bench seat now holds two adults, one on each end, with space and a restraint system for a child between them. Although the passenger seats still use the same attach points, they have been upgraded in a fashion that gives 2 inches more legroom for the rear seat and smoother operation of the middle seats. Use of new foam makes what I always thought were comfortable seats even more so. As Cirrus was developing the SF50, it was also considering appropriate training for the required type rating. If it's a jet, the PIC must have a type rating in it, which involves a check ride to ATP performance standards with an examiner satisfactory to the FAA. Planning for pilots stepping up from its SR series, Cirrus decided to keep the Vision Jet training in-house, at its Knoxville, Tennessee, Vision Center containing two full-motion Level D flight simulators. Cirrus personalizes type training by working with the new owner-to-be beginning several months before the formal type rating training is to begin. Delivery of the aircraft is not tied to the training schedule, reducing pressure during training. The Basics Powering the SF50 is a Williams International FJ33-5A jet engine developing 1,846 pounds of thrust. Maximum operating altitude is FL 310, where its max cruise is 317 ktas while burning 65 gph. At that height the pressurization system generates an 8,000-foot cabin altitude. Maximum ramp weight is 6,040 pounds with max
Man sentenced to 18 months for shining laser at Delta flight nearing Buffalo airport
A man who aimed a green laser pointer at a Delta Air Lines flight on approach to Buffalo Niagara International Airport (BUF) has been sentenced to 18 months in prison. During the March 2024 incident, Joseph L. Crapsi, 31, of Cheektowaga, repeatedly aimed the laser at the aircraft during the critical phase of flight.
Private Jet Pilot Flies Into Path of United 787 Over Newark Amid ATC Confusion
There's some fascinating air traffic control audio of a private jet departing Teterboro Airport (TEB) essentially flying directly into the path of a United Airlines wide body aircraft landing at Newark Airport (EWR). This private jet pilot seems wholly unprepared to fly in such busy airspace (especially with his lack of situational awareness), but some blame also has to go to the air traffic controller… Pilot & ATC struggle to communicate, leading to close call YouTube channel You can see ATC has air traffic control audio and a visualization of an incident that happened on the evening of July 8, 2026. It primarily involves a Hawker 800XP with the registration code N58DH, flying from Teterboro to Merida, Mexico (MID). Then there's also United flight UA1981, a Boeing 787-10 approaching Newark from Los Angeles (LAX). There's no point in transcribing the air traffic control audio, because I'd just be typing out eight minutes worth of miscommunication. But as the air traffic controller says at the end, "you have disregarded every single instruction." Among other things, the private jet gets in the path of the United Dreamliner, to the point that the heavy jet has a TCAS RA, requiring the pilots to take action to avoid a possible collision. This audio is just painful to listen to. The guy basically doesn't follow a single instruction, and also completely lacks situational awareness, especially given the busy airspace he's flying in. Obviously English isn't this guy's first language, but even so, you'd hope that he'd be better prepared than this. I assume he's a professional corporate pilot, in which case you'd kind of hope for a bit more, no? ATC bears quite a bit of responsibility here as well I will say, I don't think it's fair to completely blame the pilot here, as the air traffic controller played a contributing role in this as well. I get that controllers are busy and there are a lot of things for them to focus on, but from the beginning, he didn't do a great job with this interaction, as I see it: The controller initially gave the pilot the instruction to fly a heading of 260, but instead, he read back a heading of 200, and the air traffic controller didn't catch that; if that had been caught, it would've prevented a lot of the subsequent issues Given that English was not the pilot's first language, the controller's verbose instructions and fast talking probably didn't help with minimizing the odds of miscommunication It seems like the extended conversation between the controller and the United pilot should've happened off frequency in such busy airspace, especially with the other pilot still seemingly confused When the pilot was confused about the altitude and asked if he should be climbing to 15,000 feet (rather than the 6,000 feet that was instructed), there was no response on that from the controller On the plus side, kudos to the United pilots for their professionalism. Bottom line A Hawker 800XP and a United Boeing 787 got uncomfortably close between Teterboro and Newark, to the point that the Dreamliner got a TCAS RA. This issue stems from a miscommunication between the private jet pilot and the air traffic controller. Clearly the pilot's first language wasn't English, and on top of that, he didn't seem properly prepared to be flying in airspace this congested. Unfortunately he read back instructions incorrectly, and the controller didn't catch that, which then had a chain reaction. What do you make of this ATC interaction, and where the fault lies?
The Daily Touch & Go
The day's best aviation news in your inbox. Free, no spam.