On January 24, 2023, the Maine Office of the Attorney General reported a data breach involving CommuteAir LLC that occurred on January 15, 2023, due to an external system breach (hacking). Approximately 1,473 individuals were affected, including 3 residents in Maine, and the compromised information included personally identifiable information such as names, dates of birth, and phone numbers. Identity theft protection services were offered, specifically Life Lock's Defender Choice Upgraded Package for 12 months.

On November 8, 2022, CommuteAir, LLC experienced an external system breach (hacking) reported by the Maine Office of the Attorney General on November 17, 2022. The incident compromised the personal data of 2,856 individuals, including names, dates of birth, and the last four digits of Social Security numbers. While no credit card or health-related information was exposed, the breach posed risks of identity theft and fraud due to the sensitivity of the leaked partial SSNs. The attack affected 6 Maine residents specifically, though the broader impact included individuals beyond the state. The breach was classified as an unauthorized external intrusion, highlighting vulnerabilities in CommuteAir’s cybersecurity defenses. No ransomware was involved, and the exposed data was limited to personally identifiable information (PII) without financial or medical records.