Transport
9 organizations, 19 confirmed incidents.
Transport covers airlines, railways, shipping and logistics companies holding passenger, employee and cargo-tracking data, and can also hold payment-card and loyalty-program information collected at the point of booking. There is no transport-specific federal breach-notification law for personal data; an incident is reported under the general state or national data-breach notification statute covering the individuals affected, separately from any cybersecurity-incident reporting a carrier separately owes its own transportation-security regulator, under rules that do not themselves govern personal-data notice.
Incidents by year
| Year | Confirmed incidents |
|---|---|
| 2026 | 3 |
| 2024 | 1 |
| 2023 | 2 |
| 2022 | 3 |
| 2021 | 3 |
| 2020 | 3 |
| 2018 | 3 |
| 2013 | 1 |
Top organizations by confirmed incidents
Questions and answers
How many confirmed incidents involve Transport organizations on Breach Census?
19 confirmed incidents across 9 organizations in the Transport sector are recorded on Breach Census.
Which year had the most confirmed Transport incidents?
2026, with 3 confirmed incidents, the most of any year on record for this sector.
Which attack types are most common in the Transport sector?
Among Transport sector incidents that carry an attack-type classification, the most common are Unauthorized Access/Disclosure, Ransomware Attack.
What counts as a confirmed incident for the Transport sector?
An incident counts here once its primary organization carries the Transport sector label and the incident itself has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.