aircreebec.ca Listed by Chaos Ransomware Group
If you are a customer of aircreebec.ca, here’s what is being claimed, and what it would mean for you.
aircreebec.ca was listed on Chaos's leak site. Chaos claims to have stolen internal data. This is the group's claim, not a confirmed finding.
Air Creebec, the Quebec-based regional airline operating since 1982, may have had internal files stolen and published by the Chaos ransomware group on July 6, 2026. The data appeared on the group’s leak site after the company apparently did not meet the attackers’ demands. Anyone who has flown with Air Creebec, used its medical transport services, or worked with the carrier may have personal information now exposed.
Watch aircreebec.ca
Get alerted the next time aircreebec.ca files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about aircreebec.ca’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that Air Creebec’s internal documents were exfiltrated during a ransomware incident. The Chaos ransomware group listed the Canadian airline on its dark-web leak site on July 6, 2026. Available details describe the stolen material as internal files; the exact number of people affected remains unknown. The company, headquartered in Waskaganish, Quebec, provides scheduled flights, charter services, medical evacuations, and cargo operations across the region.
- Every indexed leak tied to your address — all of them, named and dated
- What this kind of incident typically exposes
- A ten-minute lock list written for this kind of organisation
Why This Matters for You and Your Family
When an airline’s internal files are stolen, passenger records, employee payroll data, medical transport logs, and vendor contracts can end up in criminal hands. Even if you are not a frequent flyer, a single booking made for yourself or a family member can link your name, address, phone number, and payment details to this claimed breach. Once that information circulates on underground forums, it becomes raw material for identity theft, phishing campaigns, and harassment that can reach your home and your children.
The Doxxing and Identity-Chain Risk
Stolen airline records rarely stay isolated. A passenger name and phone number can be cross-referenced with social-media handles, gaming usernames, and school records to build a complete profile. Criminals then use these links to launch account takeovers on email, banking, or gaming platforms. Credential leaks like this one cascade into account takeovers and doxxing chains, especially when children’s travel or family bookings are involved. What begins as an airline breach can quietly expose your family’s full digital footprint across multiple services.
Chaos Ransomware Group Track Record
Public reporting attributes the attack to the Chaos ransomware group. The group emerged in recent years and has targeted organizations across North America and Europe. Notable prior victims include healthcare providers, manufacturers, and smaller government entities. Their typical playbook involves gaining initial access through phishing or exploited remote desktop services, exfiltrating sensitive files before encrypting systems, and then pressuring victims with threats to publish the data on their leak site if ransom is not paid.
What to do
- Run a DoxxScan to map every link between your emails, phone numbers, travel records, and real-world identity so you can see exactly what this claimed breach connects to.
- Rotate any password you have ever used when booking with Air Creebec or similar regional carriers, then enable 2FA through an authenticator app on every account where that password was reused.
- Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your family’s data is caught in hours rather than months.
- Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same address or parent email.
- Let remediation specialists handle the takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.
The incident shows how quickly a regional company’s data breach can reach ordinary families who simply bought a plane ticket or used medical transport. Taking concrete steps now limits how far criminals can travel down the identity chain created by this leak. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this claimed breach opened.
What the free scan actually returns
Found on people-search siteswe remove these
These listings are live, public, and legal to remove — and removing them is what we do.
Found in breach recordsverifiedreported — unverified
Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.
Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.
Report details & sourcing
Related breaches
expresspros.com Listed by Chaos Ransomware Group
Express Employment Professionals — Data Breach Notification & Public Disclosure We have officially i…
Pittsrad Listed by Spirals Ransomware Group
Pittsrad was listed on the Spirals ransomware leak site. The group claims to have stolen internal da…
Stim Listed by Panzer Ransomware Group
Stim France specializes in video surveillance solutions within the security industry. The company of…