corporateflight.com Listed by Lynx Ransomware Group

On March 27, 2025, Corporate Flight, a private jet charter company based at Oakland County International Airport in Waterford, Michigan, appeared on the leak site of the lynx Ransomware Group. The listing indicates that internal files were exfiltrated during a ransomware attack. While the exact number of individuals whose data may have been exposed remains unknown, anyone who has flown with the company, used its services, or had personal or payment information stored in its systems could be affected.

What Public Reporting Shows

Public reporting on the lynx leak site describes the theft of internal files from Corporate Flight. The company specializes in private jet charters with a fleet that includes Hawker 800XP and Cessna Citation aircraft, serving clients in the Metro Detroit area and across the country. Available details confirm the data was taken in a ransomware incident, though the precise volume and specific types of records have not been fully disclosed in initial listings. The leak site entry itself serves as the primary public evidence of the breach.

Why This Matters for You and Your Family

If you or someone in your family has ever booked a private flight, provided identification for a charter, or shared payment details with Corporate Flight, your information may now sit in a ransomware group’s hands. Internal files often contain names, addresses, dates of birth, passport copies, credit card numbers, and travel itineraries. Once stolen, this data can be used for identity theft, fraudulent charges, or sold to others who want to target frequent travelers. For families, a single breach like this can expose both parents and children if family travel records or shared contact information were involved.

The Doxxing and Identity-Chain Risks

Stolen travel records frequently link your real identity to email addresses, phone numbers, and sometimes even frequent-flyer or loyalty account details. Attackers can use these connections to build a larger picture of your life, a process known as identity chaining. A seemingly harmless flight booking can become the starting point for doxxing, phishing campaigns, or attempts to access other accounts that reuse the same credentials. Credential leaks like this one often cascade into gaming account takeovers, especially for children’s profiles that share family email addresses or phone numbers.