Summary
- FlightAware deeply regrets a “data security incident” that potentially exposed the personal information of several thousand users.
- Some users’ social security numbers were possibly leaked as well.
- The website values user privacy and took immediate action to fix the error once discovering it.
Digital aviation company FlightAware is apologizing after recently discovering a “data security incident” related to a “configuration error.” The incident, however, was not recent as it occurred over three years ago.
Thousands of subscription users may have had their personal information shared “inadvertently.” The major flight-tracking platform released a statement notifying its users of the security episode, but appears to have shared two different versions of its remarks.
Accidentally exposing personal data
FlightAware’s President and General Manager, Matt Davis, revealed the data exposure in an email to its users on Sunday.
“On July 25, 2024, we discovered a configuration error that may have inadvertently exposed your personal information in your FlightAware account, including user ID, password, and email address. Depending on the information you provided, the information may also have included your full name, billing address, shipping address, IP address, social media accounts, telephone numbers, year of birth, last four digits of your credit card number, information about aircraft owned, industry, title, pilot status (yes/no), and your account activity (such as flights viewed and comments posted).”
Social security numbers on the loose?
Davis’ same statement was also posted on the company’s website. Out of an abundance of caution, all “potentially impacted users” will be prompted to reset their password upon visiting the website for the first time since Sunday. The executive, however, failed to mention in that particular statement that additional information could have been exposed. In the company’s template notice submitted to California Attorney General (AG) Rob Bonta’s Office on August 13th, Davis added that social security information may have also been leaked.
“Additionally, our investigation has revealed that your Social Security Number may have been exposed.”
He reiterated that the company values its users’ privacy and deeply regrets that the incident occurred. Davis also explained that once exposure was discovered last month, the website “immediately remedied the configuration error.”
Photo: FlightAware
The extent of the configuration complications is unknown. However, according to the California Department of Justice, the exact date of the breach was Friday, January 1, 2021 – more than three years ago. Nonetheless, the notification of the data security incident “was not delayed” as it was subject to an investigation by law enforcement, according to Davis.
Check It Out
How Do Flight Tracking Websites Work?
With the public availabilty of ADS-B data, flight tracking websites can access more than ever before.
FlightAware has four different subscription packages based on the features offered. Its “Basic” subscription – catered for travelers and plane spotters – is free, while its most premium subscription – “Enterprise X” – provides fleet tracking and live weather data for $150 a month.
Differences in notifications
It is suggested that only selected users who previously shared their social security numbers with the company to register their accounts may have received the same notification that was submitted to the California AG. According to the notice, the company is offering complimentary credit monitoring through Equifax for two years.
It is also suggested that the notification was mailed to users as Davis particularly explained that they would need to “follow the instructions in the attached pre-printed instructions,” and that their “individual promotional code may be found in the header…”
Photo: Federal Aviation Administration
Simple Flying contacted FlightAware late Tuesday for details on the differences in the notifications that were published, but a representative could not be immediately reached.
“FlightAware respects the privacy of your personal information and takes the security of that information seriously,” Davis said.
The company is known as the world’s largest flight tracking and data platform. It was founded in 2005 and was acquired by aviation and defense company Collins Aerospace in 2021.
Read Next
Flight Instructor In Alaska Converts Douglas DC-6 And DC-9 Aircrafts Into Accommodations
Jon Kotwicki has worked hard to provide a unique experience for future pilots and tourists.