American Airlines subsidiary Envoy Air reports data breach through Oracle Zero-Day attack
Learn More
Envoy Air, a regional airline carrier subsidiary of American Airlines, is reporting that attackers stole data from its Oracle E-Business Suite application in a cyber attack.
The breach is part of a broader campaign by the Cl0p ransomware gang, which exploited a zero-day vulnerability in Oracle's enterprise software to compromise dozens of organizations worldwide. Envoy Air, reported the incident after the Clop group listed American Airlines on its data leak site and began publicly releasing what they claim to be stolen data.
Envoy claimed that no sensitive customer data or passenger information was affected by the breach, but the investigation revealed that a limited amount of business information and commercial contact details may have been compromised during the attack.
The number of the affected individuals is not disclosed.
