
Surf Air Mobility
Transforming air mobility through software and electrification.



Transforming air mobility through software and electrification.

Grupo Aeromexico, S.A.B. de C.V. is a holding company whose subsidiaries are engaged in commercial aviation and the promotion of passenger loyalty programs in Mexico. Aeromexico, Mexico’s global airline, operates more than 600 daily flights and has its main hub in Terminal 2 of the Mexico City International Airport. Its destinations network features 89 cities on three continents; including 43 destinations in Mexico, 18 in the United States, 17 in Latin America, 4 in Europe, 3 in Canada, and 3 in Asia. The Group's operating fleet of 133 aircraft is comprised of Boeing 787 and 737 jet airliners and next generation Embraer 170 and 190 models. In 2012, the airline announced its most significant investment strategy in Mexican aviation history, purchasing 100 Boeing aircraft including 90 MAX B737 jet airliners and 10 B787-9 Dreamliners. As a founding member of the SkyTeam airline alliance, Aeromexico offers customers more than 1,000 destinations in 177 countries served by the 20 SkyTeam airline partners rewarding passengers with benefits. Our vision Be the #1 choice for delivering the best personalized flying experience with a spirit of warmth and service. Our Values Deliver sustained growth by providing consistent service from the heart and creating unique experiences with safety and discipline. Our Behaviors Put safety first- Fully comply with norms, policies and procedures guaranteeing the safety and well-being of our customers and employees. Serve with excellence- Provide best- in-class quality service, taking care of the details that are important for your customers, and offer a personalized experience every step of the way. Collaborate as one- Work as a team, creating synergies and integrating different perspectives to be more efficient and unleash Aeromexico’s potential. Live with unshakable integrity- Be an ambassador for Aeromexico, acting with discipline and responsibility at all moments according to our values and Code of Conduct.
Security & Compliance Standards Overview












No incidents recorded for Surf Air Mobility in 2025.
No incidents recorded for Aeromexico in 2025.
Surf Air Mobility cyber incidents detection timeline including parent company and subsidiaries
Aeromexico cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.
A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.