Cirrus Aircraft data breach
Cirrus Aircraft announced a data breach on Nov 10, 2026 affecting about 3,903 people, exposing names, addresses, Social Security numbers and driver's license numbers. No settlement or compensation has been announced.
Was I affected?
People who received a Cirrus Aircraft notice letter in November 2026; Cirrus has not said whether they are aircraft owners, employees or others.
| Announced | Nov 10, 2026 |
|---|---|
| When it happened | July 17, 2026 |
| Country | United States |
| People affected | 3,903 |
| Data exposed | Names, Addresses, Social Security numbers, Driver's license numbers, Passport numbers, National ID numbers, Bank or financial details and Medical information |
| Status | Confirmed by the company or a regulator filing |
What happened
Minnesota aircraft maker Cirrus Aircraft notified state attorneys general on November 10, 2026 of a July 17, 2026 'sophisticated social engineering event' that led to certain documents being disclosed to an unknown third party. Information potentially exposed includes names, addresses, Social Security numbers, driver's license, passport and other government ID numbers, financial account information and medical information. According to AVweb, the Texas attorney general filing lists 3,903 people affected overall, including 280 Texans; Vermont's list shows four Vermonters. Cirrus told FLYING it has completed its investigation and notified affected individuals, and it is offering 24 months of free Epiq credit monitoring.
What should I do?
- Enroll in the 24 months of free Epiq credit monitoring using the code in your letter; questions go to Cirrus's call center at 888-650-4420.
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Watch bank and card statements and health insurance explanation-of-benefits forms for charges or services you don't recognize.
- Be suspicious of emails or calls about aircraft purchases, financing or deliveries that ask you to send documents or change payment details.
How Korea fines a breach this size
For comparison, Korea's privacy regulator fined Tiffany Korea ₩2.4 billion (about US$1.6M) in February 2026 over a breach of 4,600 people. Korean law fines the security failure itself, not only misuse of the data.
More data breaches in the United States →
Check the other services you use →
Sources
- Cirrus Reports Data Breach Involving Financial, Medical, Other Personal Info · FLYING Magazine · news
- Cirrus Reports Data Breach · AVweb · news