{"id":363900,"date":"2025-10-21T11:47:29","date_gmt":"2025-10-21T15:47:29","guid":{"rendered":"https:\/\/tech.co\/?p=363900"},"modified":"2025-10-21T11:47:29","modified_gmt":"2025-10-21T15:47:29","slug":"envoy-air-suffers-data-breach","status":"publish","type":"post","link":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach","title":{"rendered":"American Airlines Subsidiary Suffers Data Breach"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row][vc_column]\n<\/p><div class=\"verdict-box inform-box\" data-eventcategory=\"verdictbox\" data-component=\"verdict-box\" data-total-positions=\"3\">\n\n <div class=\"verdict-box-wrap inform-box-wrap\">\n <h3 class=\"verdict-box-title\">Key Takeaways<\/h3>\n \n <div class=\"verdict-box-info\">\n<ul>\n<li><strong>Envoy Air, a subsidiary of American Airlines, has confirmed that it recently suffered a data breach.<\/strong><\/li>\n<li><strong>The company was targeted by CIop, a hacker group that has been targeting Oracle E-Business Suite (EBS) customers.<\/strong><\/li>\n<li><strong>The cybersecurity landscape is in crisis, with the recent Jaguar Land Rover data breach indicating that logistics businesses are equally vulnerable to their business counterparts.<\/strong><\/li>\n<\/ul>\n<p>\n<\/p><\/div>\n <\/div>\n\n <div class=\"verdict-box-footer inform-box-buttons\">\n <div class=\"container\">\n <div class=\"row\">\n <\/div>\n <\/div>\n <\/div>\n\n<\/div>\n[vc_column_text css=&rdquo;&rdquo;]Envoy Air, a subsidiary of American Airlines, has suffered a wide-ranging cyberattack. The group confirmed that it fell victim to a recent cybercrime campaign targeting organizations that use Oracle&rsquo;s E-Business Suite (EBS) management solution.\n<p>Last week, American Airlines was listed on a Tor-based leak website belonging to the so-called CIop ransomware group. American Airlines data totaling 26GB was made public on the website, leading Envoy to admit that &ldquo;a limited amount of business information and commercial contact details may have been compromised.&rdquo;<\/p>\n<p>High-profile data breaches continue to wreak havoc across the business sector in 2025. Recently, a <a href=\"https:\/\/tech.co\/news\/massive-security-breach-cisa-warning\"><strong>massive security breach<\/strong><\/a> at F5 led the Cybersecurity and Infrastructure (CISA) to issue an emergency directive, illuminating the scale of a problem which threatens to spiral out of control.[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=&rdquo;&rdquo;]<\/p>\n<h2>American Airlines Subsidiary Hit With Cyberattack<\/h2>\n<p>Envoy Air has confirmed that it recently suffered a data breach. The company, which is one of the largest subsidiaries of American Airlines, carries out more than 800 flights per day to more than 160 destinations under the American Eagle brand.<\/p>\n<p>Reportedly, the company fell victim to a wide-ranging cybercrime campaign targeting the Oracle EBS management solution. This was allegedly carried out by the CIop ransomware group, which has links to the cybercrime group known as FIN11.[\/vc_column_text][vc_column_text css=&rdquo;&rdquo;]In a statement to media, Envoy confirmed that it been targeted as part of the campaign, with a spokesperson saying that &ldquo;a limited amount of business information and commercial contact details may have been compromised.&rdquo;[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=&rdquo;&rdquo;]<\/p>\n<h2>Hacker Group Targets Oracle Customers<\/h2>\n<p>The Envoy Air breach forms part of a wider plot conducted by ransomware group, CIop. The perpetrators have been targeting Oracle EBS users through a zero-day vulnerability, which has so far affected American Airlines, Harvard University, the University of Witwatersrand in South Africa, and industrial giant, Emerson.<\/p>\n<p>The South African university confirmed via a statement that it was working to determine which data had been compromised. While the hacker group has confirmed that it stole data from Emerson, no such information has been made public yet.<\/p>\n<p>In recent years, the group has gained notoriety for launching similar attacks on file transfer services including Cleo, MOVEit, and Fortra. Reportedly, CIop victims receive extortion emails not long after the initial breach is identified.[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=&rdquo;&rdquo;]<\/p>\n<h2>Business World in Cybersecurity Crisis<\/h2>\n<p>In 2025, the business sector is facing an unprecedented problem: data breaches. Not only are <a href=\"https:\/\/tech.co\/news\/5-companies-data-breaches-paid-price\"><strong>costly cyberattacks<\/strong><\/a> becoming more frequent, but firms are <a href=\"https:\/\/tech.co\/news\/bosses-cant-identify-phishing-scams\"><strong>not adequately prepared<\/strong><\/a> to deal with the rising threat level. If this problem continues unabated, the consequences will be severe.<\/p>\n<p>In order to counteract the threat, businesses have an obligation to increase their cybersecurity budgets, investing money into the latest tech and talent. Alongside this, companies should also look to upskill their existing employees and make sure they&rsquo;re properly vetting their vendors, as <a href=\"https:\/\/tech.co\/news\/third-party-data-breaches-increasing\"><strong>data breaches involving third parties<\/strong><\/a> are also on the rise.<\/p>\n<p>And as the recent <a href=\"https:\/\/tech.co\/news\/jaguar-land-rover-cyberattack-supply-chain\"><strong>Jaguar Land Rover<\/strong><\/a> cyberattack illustrates, the logistics industry is no different. In order to prevent supply chains from grinding to a halt when cyber disaster strikes, logistics businesses should make sure that cybersecurity is top of their agenda as we head towards the new year.[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Envoy Air, part of American Airlines, has confirmed that it was targeted by the CIop ransomware group.<\/p>\n","protected":false},"author":9765,"featured_media":363905,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"single-sidebar.php","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[49003],"class_list":["post-363900","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-privacy-security","col-12"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>American Airlines Subsidiary Suffers Data Breach<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"American Airlines Subsidiary Suffers Data Breach\" \/>\n<meta property=\"og:description\" content=\"Envoy Air, part of American Airlines, has confirmed that it was targeted by the CIop ransomware group.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach\" \/>\n<meta property=\"og:site_name\" content=\"Tech.co\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-21T15:47:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"960\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Gus Mallett\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Gus Mallett\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#article\",\"isPartOf\":{\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach\"},\"author\":{\"name\":\"Gus Mallett\",\"@id\":\"https:\/\/tech.co\/#\/schema\/person\/6c045f5fc6b965203e457d019be8d668\"},\"headline\":\"American Airlines Subsidiary Suffers Data Breach\",\"datePublished\":\"2025-10-21T15:47:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach\"},\"wordCount\":659,\"image\":{\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#primaryimage\"},\"thumbnailUrl\":\"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg\",\"keywords\":[\"Privacy and Security\"],\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\",\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/tech.co\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach\",\"url\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach\",\"name\":\"American Airlines Subsidiary Suffers Data Breach\",\"isPartOf\":{\"@id\":\"https:\/\/tech.co\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#primaryimage\"},\"image\":{\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#primaryimage\"},\"thumbnailUrl\":\"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg\",\"datePublished\":\"2025-10-21T15:47:29+00:00\",\"author\":{\"@id\":\"https:\/\/tech.co\/#\/schema\/person\/6c045f5fc6b965203e457d019be8d668\"},\"breadcrumb\":{\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#primaryimage\",\"url\":\"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg\",\"contentUrl\":\"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg\",\"width\":1920,\"height\":960,\"caption\":\"American Airlines plane in air\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/tech.co\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"American Airlines Subsidiary Suffers Data Breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/tech.co\/#website\",\"url\":\"https:\/\/tech.co\/\",\"name\":\"Tech.co\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/tech.co\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/tech.co\/#\/schema\/person\/6c045f5fc6b965203e457d019be8d668\",\"name\":\"Gus Mallett\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/tech.co\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f0bdaea7a3ca5dc0e1780575ff2129c3edd8001d56277ea5a8202b101515cccc?s=96&d=blank&r=pg\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f0bdaea7a3ca5dc0e1780575ff2129c3edd8001d56277ea5a8202b101515cccc?s=96&d=blank&r=pg\",\"caption\":\"Gus Mallett\"},\"description\":\"Gus is a Senior Writer at Tech.co. Since completing his studies, he has pursued a career in fintech and technology writing which has involved writing reports on subjects including web3 and inclusive design. His work has featured extensively on 11:FS, The Fold Creative, and Morocco Bound Review. Outside of Tech.co, he has an avid interest in US politics and culture.\",\"url\":\"https:\/\/tech.co\/author\/gus-mallett\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"American Airlines Subsidiary Suffers Data Breach","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach","og_locale":"en_US","og_type":"article","og_title":"American Airlines Subsidiary Suffers Data Breach","og_description":"Envoy Air, part of American Airlines, has confirmed that it was targeted by the CIop ransomware group.","og_url":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach","og_site_name":"Tech.co","article_published_time":"2025-10-21T15:47:29+00:00","og_image":[{"width":1920,"height":960,"url":"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg","type":"image\/jpeg"}],"author":"Gus Mallett","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Gus Mallett","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#article","isPartOf":{"@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach"},"author":{"name":"Gus Mallett","@id":"https:\/\/tech.co\/#\/schema\/person\/6c045f5fc6b965203e457d019be8d668"},"headline":"American Airlines Subsidiary Suffers Data Breach","datePublished":"2025-10-21T15:47:29+00:00","mainEntityOfPage":{"@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach"},"wordCount":659,"image":{"@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#primaryimage"},"thumbnailUrl":"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg","keywords":["Privacy and Security"],"articleSection":["News"],"inLanguage":"en-US","copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/tech.co\/#organization"}},{"@type":"WebPage","@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach","url":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach","name":"American Airlines Subsidiary Suffers Data Breach","isPartOf":{"@id":"https:\/\/tech.co\/#website"},"primaryImageOfPage":{"@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#primaryimage"},"image":{"@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#primaryimage"},"thumbnailUrl":"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg","datePublished":"2025-10-21T15:47:29+00:00","author":{"@id":"https:\/\/tech.co\/#\/schema\/person\/6c045f5fc6b965203e457d019be8d668"},"breadcrumb":{"@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/tech.co\/news\/envoy-air-suffers-data-breach"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#primaryimage","url":"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg","contentUrl":"https:\/\/images.tech.co\/wp-content\/uploads\/2025\/10\/21111040\/AdobeStock_304219705_Editorial_Use_Only.jpg","width":1920,"height":960,"caption":"American Airlines plane in air"},{"@type":"BreadcrumbList","@id":"https:\/\/tech.co\/news\/envoy-air-suffers-data-breach#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/tech.co\/"},{"@type":"ListItem","position":2,"name":"American Airlines Subsidiary Suffers Data Breach"}]},{"@type":"WebSite","@id":"https:\/\/tech.co\/#website","url":"https:\/\/tech.co\/","name":"Tech.co","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/tech.co\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/tech.co\/#\/schema\/person\/6c045f5fc6b965203e457d019be8d668","name":"Gus Mallett","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/tech.co\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f0bdaea7a3ca5dc0e1780575ff2129c3edd8001d56277ea5a8202b101515cccc?s=96&d=blank&r=pg","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f0bdaea7a3ca5dc0e1780575ff2129c3edd8001d56277ea5a8202b101515cccc?s=96&d=blank&r=pg","caption":"Gus Mallett"},"description":"Gus is a Senior Writer at Tech.co. Since completing his studies, he has pursued a career in fintech and technology writing which has involved writing reports on subjects including web3 and inclusive design. His work has featured extensively on 11:FS, The Fold Creative, and Morocco Bound Review. Outside of Tech.co, he has an avid interest in US politics and culture.","url":"https:\/\/tech.co\/author\/gus-mallett"}]}},"_links":{"self":[{"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/posts\/363900","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/users\/9765"}],"replies":[{"embeddable":true,"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/comments?post=363900"}],"version-history":[{"count":0,"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/posts\/363900\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/media\/363905"}],"wp:attachment":[{"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/media?parent=363900"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/categories?post=363900"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tech.co\/wp-json\/wp\/v2\/tags?post=363900"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}