(follow-up) JetBlue notification letter indicates no evidence that any employee data accessed
As reported previously on this blog, JetBlue had a security breach involving the insertion of malware on their system.
Last week, the airline notified the New Hampshire Attorney General’s Office about the incident. Their letter was somewhat imprecise about when they were informed of the problem by a federal law enforcement agency, saying only that “Earlier this year” they were informed.
Their investigation revealed that although there were files with non-personal business data that had been accessed, there was no evidence that any of the files with employee information had actually been accessed. Despite the lack of any evidence of access to the employee data, they notified employees, including 178 New Hampshire residents.