Waiting around in airports can be tedious. When you’re waiting to jet off to a new destination, it can be tempting to share a post about this on social media to help pass the time - and as a #humblebrag, of course.
Often this photo can involve your boarding pass tucked inside your passport – but posting a photo of your boarding pass online is something you should never do.
This is because the letters and numbers found on a boarding pass are unique to you, and gives the airline data about you – specifically a six-digit number.
This six-digit number allows airport staff to find your passenger name record (PNR) – which includes contact information and flight booking - so by posting it online, you’re allowing hackers to potentially access this information as well.
Security-based researcher, Noam Rotem, tested the theory on an online booking system called Amadeous which is used by travel agents, booking sites and over 200 major airlines. He told Popular Mechanics: “Just by guessing PNRs I was able to access personal data and change contact details of customers.”
If a hacker were to obtain your PNR, they could access your personal information with the airline including changing seats, stealing frequent flier miles, change the passenger’s contact details and cancel or change the flight.
So you might want to think twice before posting a picture of your boarding pass online.
