Frontier Airlines API Exposes Passport, Credit Card, and Personal Data via Boarding Pass Information

A security researcher known as BobDaHacker has revealed significant vulnerabilities in Frontier Airlines' booking system. These flaws enable anyone with a six-character booking code, or PNR, and a passenger's last name, both visible on every Frontier boarding pass, to access full personal records. This information includes passport numbers, partial credit card details, and home addresses, all available through the airline's mobile API.