Two of the largest airlines in the world, Southwest Airlines and American Airlines, disclosed data breaches on June 23, 2023, due to the compromise of their third-party vendor Pilot Credentials. Pilot Credentials is an independent service provider that manages pilot applications and recruitment portals for the air transport industry. Southwest and American Airlines were informed of the Pilot Credentials compromise on May 3, 2023, where an unauthorized actor gained access to the vendor’s systems on April 30, 2023, and exfiltrated documents. The documents involved data that was “provided by certain applicants in the pilot and cadet hiring process.” Each airline submitted their own data breach notification, and American Airlines noted that the compromised data contains the following personal information: names and Social Security numbers (SSNs), drivers’ license numbers, passport numbers, dates of birth, Airman Certificate numbers, and other government-issued identification numbers. American Airlines also noted that 5,745 individuals were impacted by this data breach. Southwest did not specify all of the exposed data fields besides impacted individuals’ names, drivers’ license numbers, and identification card numbers, but did note that 3,009 individuals have been impacted by this data breach. There is currently no evidence indicating that the pilots were specifically targeted or that the stolen information was exploited, and the airlines have stated that they will no longer be utilizing Pilot Credentials. CTIX analysts will continue to monitor technical details of the Pilot Credentials incident and will provide updates as necessary.