Cirrus Aircraft Data Breach Exposes Sensitive Personal and Health Information

Cirrus Aircraft, a personal aviation company headquartered in Duluth, Minnesota, disclosed a data breach that occurred on July 17, 2026.

Cirrus disclosed the breach to the attorneys general of Massachusetts and Texas on Nov. 10, 2026. So far, 280 Texas residents were affected.

On July 17, 2026, Cirrus was the target of a social engineering event.

Once Cirrus became aware of the incident, the company launched an investigation and data analysis to determine what happened and what data may have been involved.

The company determined that the types of information exposed included names, addresses, Social Security numbers, driver's license numbers, government-issued ID numbers (such as passports or state ID cards), financial information (such as account numbers or credit and debit card numbers) and medical information.

Cirrus's response to the breach

Cirrus is offering affected individuals a complimentary 24-month membership in Epiq Universal Credit Monitoring.

Affected individuals can enroll by visiting Epiq Monitoring Solutions and entering the activation code included in their notification letter. For questions about the enrollment process, individuals can call Epiq directly at 866-675-2006, Monday through Friday from 9 a.m. to 5:30 p.m. ET.

Cirrus has also set up a dedicated call center for questions about the incident. Affected individuals can reach it toll-free at 888-650-4420, Monday through Friday from 9 a.m. to 9 p.m. ET, excluding major U.S. holidays.