Breach Reference
Scan your email →
Data breach reference · August 2018

Were you affected by the Air Canada breach?

Disclosed
Aug 28, 2018
Records affected
20,000
Type
Mobile app breach
Sector
General SMB

Check if your email appears in this breach.

One-click check against public breach records. No account required.

Takes 60 seconds. We never store your email address.

What happened

In August 2018, Air Canada detected unusual login behavior on its mobile app and locked down all 1.7 million user accounts as a precaution. Approximately 20,000 profiles were later confirmed to have been accessed.<br><br>Exposed information may have included names, email addresses, phone numbers, passport numbers, expiration dates, country of residence, gender, birth date, and other travel preferences. Air Canada forced all users to reset their passwords when the app came back online.

In August 2018, Air Canada detected unusual login behavior on its mobile app and locked down all 1.7 million user accounts as a precaution. Approximately 20,000 profiles were later confirmed to have been accessed.

Exposed information may have included names, email addresses, phone numbers, passport numbers, expiration dates, country of residence, gender, birth date, and other travel preferences. Air Canada forced all users to reset their passwords when the app came back online.

Reported impact: App re-issued, class-action settled

Source: Office of the Privacy Commissioner of Canada

What to do if you were affected

Common questions about the Air Canada breach

When did the Air Canada breach happen?
The breach was disclosed in August 2018. Public reporting was carried by Office of the Privacy Commissioner of Canada. The incident is categorized as: Mobile app breach.
How many people were affected?
Approximately 20000 records were reported affected. Whether your specific data was among them depends on your relationship with Air Canada during the exposure window.
How do I check if my email was in this breach?
Enter your email in the scan form above. LeakTrace runs a check against known breach records and returns the result in under a minute. No account required.
What should I do if my data was exposed?
• Change your Air Canada Aeroplan password if you have not since 2018.
• If your passport number was potentially exposed, monitor for identity theft.
• Enable two-factor authentication on your Aeroplan account.
• Watch for phishing emails referencing flight bookings or Aeroplan miles.
• Review your other airline / travel loyalty accounts for reused passwords.
Is my data still at risk years later?
Yes. Breach data from years past continues to circulate on active infostealer channels and credential-stuffing marketplaces. The passage of time does not neutralize the exposure. Ongoing monitoring catches new exposures as they land instead of only the ones already disclosed publicly.

Other general smb sector breaches

Ticketmaster
May 2024 · 560,000,000 records
London Drugs
Apr 2024 · 3,000,000 records
Indigo Books
Feb 2023 · 60,000 records
Rogers Communications
Jul 2022 · 12,000,000 records