← AERTiCKET

2016 AERTiCKET — 1.5M bookings/year exposed for years

2016 1.5M records affected Share on X

Data compromised

Passenger booking data

Technical writeup

Berlin ticket wholesaler left booking data accessible via booking code. ~1.5M bookings per year exposed for years. No credit card data. Company claimed no suspicious traffic detected.

Root cause

Unsecured booking lookup; predictable codes

References