FRONTIER Airlines is facing its third data security incident in 2023. The first incident involved vulnerabilities highlighted by a hacker named BobDaHacker, who found significant security flaws in Frontier’s mobile app and booking page that exposed sensitive passenger information. Despite being notified of these issues, Frontier only addressed minor vulnerabilities.
The second incident involved a breach by Scattered Lapsus$ Hunters, which exfiltrated sensitive personal information from 11,482 individuals, including Social Security numbers and credit history, with Frontier discovering this intrusion only weeks later. The third threat emerged when a group called ExfilSquad claimed to have compromised Frontier's data through Microsoft Power Apps misconfigurations, threatening to leak 43 GB of files. Frontier remains unresponsive to inquiries regarding these breaches.