
Cirrus Reports Data Breach Involving Financial, Medical, Other Personal Info - Yahoo
Cirrus Aircraft disclosed a data breach affecting at least 284 people in July, exposing sensitive personal information including social security numbers and medical data.
Cirrus Aircraft disclosed a data breach affecting at least 284 people in July, according to notifications sent to attorneys general in Massachusetts, Vermont, and Texas. The breach exposed sensitive personal information including social security numbers, financial data, medical information, driver's license numbers, and login credentials.
The Texas and Vermont disclosures revealed that 280 Texans and four Vermonters were affected, while Massachusetts' notification did not specify the number of impacted individuals in that state. The total number of people affected remains unclear.
Breach Details
In a notice to customers, Cirrus stated the breach occurred on July 17 as a result of a "sophisticated social engineering event" that led to the unauthorized disclosure of documents to an unknown third party. The company has engaged third-party forensic firms to investigate the incident.
Once Cirrus became aware of the incident, we immediately launched a comprehensive investigation and data analysis.
Company Response
Cirrus reported that its investigation has not found evidence of fraudulent use of personal information. The company is reviewing security practices and offering affected customers a complimentary 24-month membership to Epiq Universal Credit Monitoring.
Affected individuals can contact a dedicated call center at 888-650-4420, which will be open Monday through Friday from 9 a.m. to 9 p.m. EST. The company advised customers to monitor their account statements and credit history regularly.