Cybersecurity

We actively collaborate with regulators, industry peers and cybersecurity experts through partnerships like Airlines for America’s Cybersecurity Council and multiple Information Sharing and Analysis Centers (ISAC). As members of the Aviation and Retail and Hospitality ISACs, we collectively enhance threat intelligence sharing and resilience. Our Vulnerability Disclosure Program is designed to strengthen our cybersecurity posture by encouraging security researchers to identify and report potential vulnerabilities. These efforts are designed to help safeguard our operations and customers while reinforcing the broader aviation ecosystem and U.S. critical infrastructure.

We empower our employees with knowledge and training that helps them recognize and thwart potential cyber incidents, enhancing the safety and security of our operations and data. As part of this effort, our annual corporate compliance training includes dedicated modules on cybersecurity and privacy, reinforcing our commitment to protecting sensitive information and maintaining a strong security culture.

We have established initiatives such as Innovate — a full-time program that allows interns, new college graduates and early-career professionals to explore the business and long-term careers at United — to help us build a highly capable and skilled workforce by identifying and nurturing talent. Building on this success, we have established the Cybersecurity Early Career Digital Leadership Program (CECDLP), a rotational program designed for early-career talent, including individuals without traditional STEM backgrounds and those from frontline roles. The rotational structure provides targeted training and hands-on exposure across key cybersecurity and digital risk functions (as well as mentorship) to build foundational expertise and long-term career mobility.

At United, we embrace AI as a powerful tool to enhance customer and employee experiences. Artificial intelligence enables us to provide clearer communication, improve customer support and optimize travel experiences — whether through proactive flight updates or smart baggage tracking. For our employees, AI-supported tools provide real-time insights, optimize workflows and facilitate feedback, allowing them to deliver exceptional results.

As we integrate AI into our operations, we remain committed to using it responsibly. This includes prioritizing fairness, transparency and accountability in AI-driven decisions and helping ensure that our technology empowers people. Our responsible AI principles guide the Company in developing and deploying these innovations to maintain trust and create meaningful benefits for our customers and employees. These principles are supported by cybersecurity, privacy and data governance controls designed to help mitigate risks associated with AI technologies.

United relies on many suppliers and governmental entities to accomplish our mission, so we necessarily extend our vigilance to our supply chain and work with our partners to improve the resilience of our entire ecosystem. By seeking appropriate commercial and legal protections and monitoring supplier cybersecurity risks, we assess and mitigate potential vulnerabilities that could impact our operations and customers. Our risk-management framework includes security assessments, compliance reviews and threat intelligence sharing — all intended to identify and address emerging risks. We also promote accountability by setting clear security expectations, seeking adherence to industry best practices and working closely with our key vendors to strengthen their cybersecurity posture.