CommuteAir no-fly-list leak (Transportation Security Administration)

Matthew Petti filed this request with the Transportation Security Administration of the United States of America.

It is a clone of this request.

Tracking #

2023-TSFO-00351

Multi Request CommuteAir no-fly-list leak
Status
Rejected

Communications

From: Matthew Petti

To Whom It May Concern:

Pursuant to the Freedom of Information Act, I hereby request the following records:

1. Documents mentioning, describing or generated in response to the CommuteAir leak, the preceding hack or subsequent fallout, including but not limited to:

* Damage assessments
* Emails
* Interagency communications (local, state, or federal)
* Communications with the press about the CommuteAir leak
* Communications with Twitter or other social media or sharing platforms

2. Documents mentioning or describing "Tillie Kottmann" or "maia arson crimew."

You may limit this request to records generated between January 19, 2023 and the present.

The "CommuteAir leak" refers to documents from the Terrorist Screening Database that were posted on a public server belonging to the airline CommuteAir, and forwarded to media outlets by the security researcher maia arson crimew, formerly known as Tillie Kottmann. The leak was first reported by the Daily Dot on January 19, 2023: https://www.dailydot.com/debug/no-fly-list-us-tsa-unprotected-server-commuteair/

A spokesperson for CommuteAir told the Daily Dot that the Cybersecurity and Infrastructure Security Agency was informed about the leak. Spokespeople for the Transportation Security Administration and Federal Bureau of Investigation have also acknowledged that their agencies are also aware of the reported cybersecurity incident.

If any part of these documents are exempt from disclosure, please be sure to review and release all reasonably segregable nonexempt portions of responsive documents, as the FOIA requires.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 20 business days, as the statute requires.

Sincerely,

Matthew Petti

From: Transportation Security Administration

02/02/2023Greetings,Attached is our acknowledgment to your TSA FOIA request. If you need to contact this office again concerning your request 2023-TSFO-00351, please provide the TSA reference number. This will enable us to quickly retrieve the information you are seeking and reduce our response time. This office can be reached at 571-227-2300. Regards,TSA FOIA Branch
This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and any disclosure, copying, or distribution
of this message, or the taking of any action based on it, by you is strictly prohibited.
Deloitte refers to a Deloitte member firm, one of its related entities, or Deloitte Touche Tohmatsu Limited ("DTTL"). Each Deloitte member firm is a separate legal entity and a member of DTTL. DTTL does not provide services to clients. Please see www.deloitte.com/about
to learn more.
v.E.1

From: Transportation Security Administration

Good day, Attached is the TSA's final response to your FOIA request.Respectfully, TSA FOIA Branch 6595 Springfield Center DriveSpringfield, VA 20598-6020 FOIA Main Line: (571) 227-2300
This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and any disclosure, copying, or distribution
of this message, or the taking of any action based on it, by you is strictly prohibited.
Deloitte refers to a Deloitte member firm, one of its related entities, or Deloitte Touche Tohmatsu Limited ("DTTL"). Each Deloitte member firm is a separate legal entity and a member of DTTL. DTTL does not provide services to clients. Please see www.deloitte.com/about
to learn more.
v.E.1

From: Matthew Petti

Hi,

Thanks so much for your help with this request! I really appreciate it.

Sincerely,
Matthew Petti

From:

You have reached the SecureRelease™ Support Desk.

The purpose of this inbox is to provide technical support for the SecureRelease FOIA Request Portal website (https://www.securerelease.us/).

SecureRelease Support is not involved with the processing or prioritization of requests, and this inbox is not monitored by agency personnel. To ask for an update or discuss the specifics of your request(s), you must contact the agency directly.

If you submitted your request(s) through the SecureRelease™ Request Portal<https://www.securerelease.us/> or to a participating agency using FOIA.gov, you may use the SecureRelease Portal Messages feature to securely send electronic correspondence and attachments directly to the agency.

To send a portal message:

1. Sign in to the SecureRelease™ Request Portal: https://www.securerelease.us/account-page/sign-in/
2. Click the My Requests icon
3. Locate the request you wish to inquire about, and click on the Request Number
4. From the request screen, click the Messages icon at the top of the page
5. Click the Add Message button at the upper right
6. Complete the required Message Fields
7. Drag and drop any Files you wish to attach into the file upload box (Optional)
* Maximum of 25 files can be attached to a message, and total file size cannot be more than 100 mb. Supported file formats: DOC, DOCX, XLS, XLSX, TXT, PDF, JPG, PNG, BMP and TIF/TIFF
8. Click Send
9. Return to the Messages tab within your Request to access outgoing and incoming messages

Should you have an inquiry related to your SecureRelease user account or concerning www.securerelease.us<http://www.securerelease.us>, please email us with the relevant details and a member of our support team will be happy to assist.

Take care,

SecureRelease™ Support Team
securereleasesupportteam@deloitte.com<mailto:securereleasesupportteam@deloitte.com>
www.securerelease.us<https://www.securerelease.us/>

Files