On or about October 2025, Envoy Air, a regional airline and subsidiary of American Airlines, reported a significant cybersecurity incident (the “Data Breach”) to the California Attorney General’s Office. The breach stemmed from a vulnerability in Oracle’s E-Business Suite, which was exploited by hackers to access sensitive employee data.
Envoy Air is headquartered in Irving, Texas, and operates regional flights for American Airlines. The company employs thousands of aviation professionals and plays a critical role in domestic air travel across the United States.
Envoy has notified impacted individuals and is actively investigating the breach. The company has engaged law enforcement and third-party cybersecurity experts to assess the scope of the incident and prevent future breaches. If you received a Data Breach notification letter from Envoy, it confirms that your information was potentially compromised.
What information is involved in the Envoy Air Data Breach?
Compromised information may include:
Name
Social Security Number
Date of Birth
Home Address
Employment Details
Direct deposit banking information
Your Personally Identifiable Information (PII) includes details that can be used to identify you. It plays a key role in defining your identity. Organizations are legally obligated to safeguard this data, and failure to do so can result in statutory fines and other legal consequences. If PII is stolen, it may be exploited by criminals to commit identity fraud.
A specific category of PII is Protected Health Information (PHI), which pertains to personal medical data. PHI is safeguarded under both federal and state regulations. Entities such as healthcare providers and businesses that manage PHI must ensure its security. Just like PII, compromised PHI can be misused by identity thieves, and it’s common for cybercriminals to use both types of information together.
If your data has been exposed in a breach, one of the most effective steps you can take is to enroll in credit and identity monitoring services promptly.
If you received a NOTICE OF DATA BREACH letter from Envoy Air, your personal and financial information may be at risk. This type of data can be exploited by identity thieves to commit fraud and other crimes.