Travel plans leaked: what it means and what to do

Risk level: medium. Can you change it: no. Found in 1 breaches in this directory.

What this data is

Upcoming or past itineraries, including flight numbers, hotel bookings, booking references, travel dates, destinations and passenger names.

The risk on its own

Travel plans reveal where you will be and when you will be away from home. A booking reference with a surname can sometimes allow access to manage a booking. Itineraries may also contain passport details or loyalty numbers.

The risk combined with other data

With your home address, travel dates show exactly when a property may be empty. With your email and phone number, criminals can send highly convincing booking change or payment requests. A booking reference can also be used to cancel, change or steal travel credits in some systems.

How criminals use it

  • A scam email references your real flight and asks you to pay a fee to keep your seat.
  • A criminal uses your surname and booking reference to change or cancel your trip.
  • A burglar targets your home during the travel dates in the itinerary.
  • A fake hotel message asks you to re enter card details before arrival.

What to do now

  1. Log in to the airline, hotel or travel agent directly and confirm bookings and contact details.
  2. Ask the travel provider to add a note or password to your booking if possible.
  3. Do not pay booking fees through links in emails, texts or messaging apps.
  4. Arrange mail holds, lights, cameras or a trusted neighbour while you are away.
  5. If passport or loyalty numbers were in the itinerary, follow the steps for those data types.

Frequently asked questions

Can someone change my flight with a booking reference?

With some airlines, a booking reference and surname are enough to manage a booking. Check your booking and contact the airline if anything changes.

Should I cancel my trip?

Usually not. Verify the booking, secure your accounts and plan home security while you are away.

How do I spot fake travel payment requests?

Be suspicious of urgent fees, unfamiliar payment links and messages asking for card details. Check through the official app or website.

Breaches that exposed this data

  • Otelier: 2024-07-01, 437K accounts, Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases

Tools that help

Related guides

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.