About 21 Air, LLC
21 Air, LLC, a commercial entity based in Greensboro, NC, experienced a data breach impacting 419 individuals, including one resident of Maine. The breach was discovered on November 25, 2025, and involved an external system breach (hacking). The affected individuals have been notified via written communication sent on December 11, 2025.
What Happened
On June 3, 2025, we discovered suspicious activity potentially related to an employee email account. Upon discovery, we took swift action to secure our email system and network. We also reported this incident to the Cybersecurity and Infrastructure Security Agency (“CISA”). We then immediately began working with third-party computer specialists to investigate the full nature and scope of the incident. Based on the investigation, it was determined that one 21 Air employee email account was subject to unauthorized access. As a result, together with third-party specialists, we began a comprehensive and time-consuming review of the impacted account to determine the type of information contained therein and to whom that information related. This comprehensive and time-consuming process was completed on November 25, 2025. We are now notifying those individuals whose information was potentially impacted.
The breach involved unauthorized access to an employee email account, affecting 419 individuals, including sensitive personal information. The breach occurred between March 17, 2025, and June 3, 2025.
Next Steps
Affected users are advised to remain vigilant by regularly reviewing and monitoring their account statements and credit history to guard against unauthorized transactions or activity. If any suspicious activities are noticed, they should promptly contact their financial institution. Enrolling in the complimentary identity monitoring services provided by 21 Air is highly recommended. Additional resources and steps to protect personal information are provided in the notification letter sent to the affected individuals.
Identity Theft Protection Services
21 Air, LLC is offering identity theft protection services through Cyberscout, a TransUnion company. Impacted individuals are eligible for complimentary credit monitoring and identity theft protection services for twelve months. These services include Single Bureau Credit Monitoring, a Single Bureau Credit Report, and a Single Bureau Credit Score. To activate these services, individuals must enroll within 90 days of receiving the notification letter. The enrollment process requires internet access and an email account.