Breach taxonomy
Summary
On June 23, 2025, Hawaiian Airlines, a subsidiary of Alaska Air Group, Inc., identified a cybersecurity incident affecting certain information technology systems. The company took immediate steps to safeguard operations and systems; flights continued operating safely and on schedule. Authorities and cybersecurity experts were engaged for investigation and remediation. Materiality had not been determined as of the filing date. Filed under Item 8.01; materiality not yet determined as of filing date.
Tagging rationale
ThreatUnknown
Filing does not attribute the incident to any specific actor -> UNKNOWN.
MethodsMalware
Filing states 'cybersecurity incident affecting certain information technology systems' without specifying ransomware, data exfiltration, or other specific method -> MALWARE (non-ransomware, general).
AssetsProduct Service
Filing discloses a cybersecurity incident affecting IT systems at Hawaiian Airlines (airline operations/product); flights continued operating normally -> PRODUCT-SERVICE.
EffectsNetwork Security
Filing discloses compromise of IT systems at a subsidiary with no confirmed data exposure or operational disruption; primary disclosed impact is the security compromise itself -> NETWORK-SECURITY.
Impact
Very early-stage disclosure with flights operating normally, no confirmed data exposure, no operational disruption, and materiality not yet determined -> score 1.
InsuranceNot disclosed
Filing makes no mention of insurance -> null.
Read the original SEC filing excerpt
ITEM 8.01. Other Events On June 23, 2025, Hawaiian Airlines, an Alaska Air Group, Inc. subsidiary, identified a cybersecurity incident affecting certain information technology systems. Upon learning of this event, we immediately took steps to safeguard Hawaiian's operations and systems. Flights are currently operating safely and as scheduled. We have engaged the relevant authorities and experts to assist in our investigation and ongoing remediation efforts. The Company has not yet determined whether the incident is reasonably likely to materially impact the Company's financial condition or results of operations.