Flights taken leaked: what it means and what to do

What this data is

Records of flights you booked or took, including dates, routes, booking references, seat numbers, frequent flyer numbers and sometimes passport details, held by airlines, travel agents and booking sites.

The risk on its own

Flight history shows where you have been and when, including regular trips that reveal a routine. A booking reference with a surname is often enough to open and change a booking online. Frequent flyer numbers are a target for points theft.

The risk combined with other data

With your name, email and address, future flight dates tell a burglar when your home will be empty. Passport numbers and dates of birth stored with the booking support identity fraud. Scammers also use real booking details to send convincing fake airline messages about cancellations and refunds.

How criminals use it

• Someone uses your booking reference and surname to cancel or change a flight, or to convert it to travel credit.
• A frequent flyer account is taken over and the points are spent on gift cards or flights for other people.
• A fake airline email about a cancelled flight asks for card details to process a refund.
• Burglars target your home during a trip shown in the leaked booking.

What to do now

1. Log in to your airline account, check upcoming bookings for changes, and contact the airline straight away if anything looks different.
2. Change your frequent flyer password, turn on two-factor authentication and review recent points activity.
3. If passport numbers leaked, follow the steps for leaked government IDs and ask your passport office about a replacement.
4. Handle refunds and changes only through the airline's official app or website.
5. Avoid posting travel dates publicly until you are home.

Frequently asked questions

Can someone change my flight with just a booking reference?

Often yes, because many airlines let you manage a booking with the reference and surname. Check your bookings and contact the airline if anything changes.

Are my frequent flyer points at risk?

They can be, because points are easy to spend and hard to trace. A unique password and two-factor authentication on the account are the main defence.

My passport number was in the booking. What should I do?

Ask your passport office for advice, watch for identity fraud and consider a credit freeze. Some countries will replace a passport that has been compromised.

Breaches that exposed this data

• Bourse des Vols: 2021-01-12, 1.5M accounts, Dates of birth, Email addresses, Flights taken, IP addresses, Names, Phone numbers

Tools that help

• Email Breach Check
• Phishing Link Checker
• Password Checker

Related guides

• What to Do After a Breach: Your Hour, Day and Month Plan
• Phishing Red Flags: Spot a Fake Email Before You Click
• Identity Theft Checklist: What to Do in the First 48 Hours