Frontier Airlines site leaks all personal info with just a glance at a boarding pass, researcher claims — booking number and last name nets you every passenger's personal info, including address, passport, TSA PreCheck, and most credit card info
A security researcher known as Bob has discovered significant vulnerabilities in Frontier Airlines' website and API that expose extensive personal information of passengers. By using a boarding pass code and a passenger's last name, or by scanning a boarding pass barcode, individuals can access details such as home addresses, passport information, TSA PreCheck numbers, and partial credit card data. Despite being notified, Frontier Airlines' response has been criticized as inadequate, with the researcher claiming critical vulnerabilities remain unaddressed. AI
IMPACT Exposes critical personal data, highlighting ongoing risks in airline cybersecurity and data handling practices.