People who received Frontier Airlines’ July 2026 data breach notice may be covered by a proposed class action alleging Frontier Airlines failed to protect the Social Security numbers, driver’s license numbers, passport numbers and employee ID numbers exposed in two 2026 data breaches. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes class action complaints. The statements below are unproven allegations. Frontier Airlines, Inc. has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Happened at Frontier Airlines?
Frontier Airlines, Inc. is a low-fare airline based in Denver. In an October 13, 2026 order summarizing the plaintiffs’ amended consolidated complaint, the U.S. District Court for the District of Colorado said Frontier sustained data breaches on May 12, 2026 and June 3, 2026 that compromised the names, addresses, Social Security numbers, driver’s license numbers and other identifying information of at least 11,482 people. Frontier did not notify the people affected until July 9, 2026, the order says.Frontier’s report to the Indiana Attorney General lists the same total: 11,482 people, including 98 Indiana residents, with a breach date of May 12, 2026 and a notice date of July 9, 2026. The first complaint filed says Frontier discovered the breach on June 18, 2026, and that the notice letter the plaintiff received was dated July 9.
Three proposed class actions followed. Bennett v. Frontier Airlines, Inc., No. 1:26-cv-03129, was filed July 13, 2026, and Beach v. Frontier Airlines, Inc., No. 1:26-cv-03159, and Stean v. Frontier Airlines, Inc., No. 1:26-cv-03160, followed on July 15, all in the District of Colorado. On August 13, 2026, U.S. District Judge Gordon P. Gallagher consolidated the three under the Bennett case number. A fourth suit, Pitts v. Frontier Airlines, Inc., No. 1:26-cv-03251, was filed July 20 and voluntarily dismissed without prejudice in August. No court has ruled on any of the allegations.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What the Lawsuits Allege
The Bennett plaintiff lives in Colorado and says she gave Frontier her personal information in connection with her employment there, then received a letter from Frontier saying her information was involved in the breach. Her complaint says the information Frontier held and failed to protect included:- first and last names, addresses and phone numbers
- Social Security numbers and driver’s license numbers
- passport numbers and visa numbers
- dates and places of birth, and designated contact information
- Frontier employee ID numbers
The complaint alleges that Frontier did not use reasonable safeguards, including encryption, and objects to the gap between the June 18 discovery date and the July 9 notice letters. It says the people affected still do not know exactly what was taken or what Frontier is doing to secure their information.
The Stean plaintiff, also a Colorado resident, attached her notice letter to her complaint. That complaint attributes the May 12 and June 3 intrusions to a hacking group it identifies as Scattered Lapsus$Hunters and says the group took information on thousands of employees and possibly customers. That attribution is the plaintiff’s allegation; the court’s October 13 order does not name an attacker. The Beach complaint was not publicly available for review. According to the plaintiffs’ July 20 motion to consolidate, all three cases bring negligence and breach of implied contract claims.
Who Is in the Proposed Class?
The Bennett complaint proposes a nationwide class of everyone in the United States whose information was exposed in the breach Frontier discovered on or before June 18, 2026. The Stean complaint proposes a class of everyone whose information was compromised in the breach that began in May 2026 and who was sent a notice letter. The plaintiffs’ motion to consolidate describes the people they seek to represent as those who used Frontier’s services, were employed by Frontier or were related to a Frontier employee, and whose information Frontier kept.Since consolidation, the plaintiffs have filed an amended consolidated complaint, which is now the operative pleading and may define the class differently. Any definition is a proposal: a court would have to certify a class before anyone is formally part of the case. The October 13 order notes that appointing interim class counsel has no effect on that later certification decision.
Legal Claims and What the Lawsuits Seek
The Bennett complaint brings three claims: negligence, breach of implied contract, and breach of the implied covenant of good faith and fair dealing. It asks for damages and for a court order requiring Frontier to encrypt the data it collects, run a comprehensive information security program, have independent auditors test its systems on a regular schedule, segment its network, train employees on handling personal information, and delete the plaintiffs’ information unless it can justify keeping it.The Stean complaint pleads negligence, negligence per se, breach of third-party beneficiary contract, breach of implied contract and unjust enrichment. It asks for damages, including punitive damages, improvements to Frontier’s data security, and at least three years of credit monitoring paid for by Frontier. These are requests in a complaint, not amounts or remedies anyone has been awarded.
Mediation and the November 23 Deadline
On October 13, 2026, U.S. Magistrate Judge Kathryn A. Starnella granted two motions. The first appointed Laura Van Note of Cole & Van Note, Raina C. Borrelli of Strauss Borrelli PLLC and Marc H. Edelson of Edelson Lechtzin LLP as interim co-lead class counsel; Frontier took no position on that request. The second, which Frontier did not oppose, stayed the case while the parties mediate. The mediation is scheduled for November 13, 2026 with retired Judge David E. Jones, and the scheduling conference that had been set for October 14 was cancelled.The order sets one deadline for either outcome. If the mediation succeeds, the parties must file a notice of settlement or dismissal papers by November 23, 2026. If it does not, they must file a joint motion by the same date asking the court to set a scheduling conference, with several dates that work for both sides.
A mediation is a negotiation, not a settlement, and a notice of settlement would not open a claim process on its own. A class settlement has to be submitted to the court for preliminary approval, class members are then sent notice, and the court must grant final approval before payments are made. Under the order, the case remains stayed until the court orders otherwise.
What Is Still Unknown
How the intruders got into Frontier’s systems, whether any customer records were involved, and whether any of the stolen information has been misused are not public. The Stean plaintiff says she has received more spam calls since the breach and believes they are connected to it, but no court has found that any of the Frontier data was misused, and none of the plaintiffs’ allegations has been tested.Employee records have been at the center of other 2026 breach suits, including those against Hasbro and Frontline Education. Data breach settlements that are currently taking claims are listed separately.
Questions
Is there a Frontier Airlines data breach class action?
Yes. Three proposed class actions over the breach, Bennett, Beach and Stean v. Frontier Airlines, Inc., were filed in the U.S. District Court for the District of Colorado on July 13 and 15, 2026, and were consolidated on August 13, 2026 under No. 1:26-cv-03129. No class has been certified, there is no settlement, and there is nothing to claim.
What information was exposed in the Frontier Airlines data breach?
The court’s October 13, 2026 order says names, addresses, Social Security numbers, driver’s license numbers and other identifying information were compromised. The Bennett complaint lists first and last names, addresses, phone numbers, Social Security numbers, driver’s license numbers, places of birth, designated contact information, passport numbers, visa numbers, dates of birth and Frontier employee ID numbers.
How many people were affected by the Frontier Airlines data breach?
11,482 people, according to Frontier Airlines’ report to the Indiana Attorney General, which lists a breach date of May 12, 2026, a notice date of July 9, 2026 and 98 Indiana residents. The court’s October 13, 2026 order describes the breaches as compromising the information of at least 11,482 people.
Does the November 2026 mediation mean there is a Frontier Airlines settlement?
A mediation is a negotiation session run by a neutral mediator, not a settlement. The parties are scheduled to mediate on November 13, 2026 with retired Judge David E. Jones. By November 23, 2026 they must file either a notice of settlement or dismissal papers, if mediation succeeds, or a joint motion to set a scheduling conference, if it does not. Any class settlement would still need court approval before a claim process could open.
Can I file a claim in the Frontier Airlines data breach lawsuit?
There is nothing to file. The case is at the complaint stage, no class has been certified and no settlement has been reached. When a data breach class action settles and the court grants preliminary approval, people in the settlement class are normally sent a notice describing any claim process and its deadline.
Sources
• Order on motions to appoint interim co-lead class counsel and to stay pending mediation, Bennett v. Frontier Airlines, Inc., No. 1:26-cv-03129-GPG-KAS (D. Colo., entered October 13, 2026), ECF No. 24: October 13 order (PDF) and docket.• Complaint, Bennett v. Frontier Airlines, Inc., No. 1:26-cv-03129 (D. Colo., filed July 13, 2026): Bennett complaint (PDF).
• Plaintiffs’ Motion to Consolidate Cases, Bennett v. Frontier Airlines, Inc. (D. Colo., filed July 20, 2026), ECF No. 10: motion to consolidate (PDF).
• Class Action Complaint, Stean v. Frontier Airlines, Inc., No. 1:26-cv-03160 (D. Colo., filed July 15, 2026): Stean complaint (PDF) and docket.
• Docket, Beach v. Frontier Airlines, Inc., No. 1:26-cv-03159 (D. Colo., filed July 15, 2026): docket.
• Docket, Pitts v. Frontier Airlines, Inc., No. 1:26-cv-03251 (D. Colo., filed July 20, 2026; voluntarily dismissed): docket.
• Indiana Attorney General: Data breach year-to-date report, October 2026 (Frontier Airlines entry).
