What do you do with your boarding pass at the end of a flight? Never gave it much thought, right?
But while you are in Europe, your home may be being ransacked because of the information on that boarding pass.
Whenever I have a printed boarding pass, near the end of a flight I tend to stuff it into the seat pocket, or simply toss it into the nearest container after I get off the plane.
I received an email from my daughter warning me not to do that anymore. Why not?
Because like any code that is written on a piece of paper or document, like the can of vegetables you buy, it can be easily scanned.
Big deal right? Wrong?
There is a load of personal information that is waiting for the bad guys and gals of the world to capture and use. What’s on there?
Just your personal email address, your home address and phone, and whatever else the airline may have asked for. Once the thieves have the basics they can go after more, including credit card information, financial data, and other banking information that can be accessed with a beginning foundation of information.
This information comes from the website KrebsOnSecurity http://krebsonsecurity.com/2015/10/whats-in-a-boarding-pass-barcode-a-lot/
Below is actual information as written on that website, and it is scary.
“Earlier this year, I heard from a longtime KrebsOnSecurity reader named Cory who said he began to get curious about the data stored inside a boarding pass barcode after a friend put a picture of his boarding pass up on Facebook. Cory took a screen shot of the boarding pass, enlarged it, and quickly found a site online that could read the data.
“I found a website that could decode the data and instantly had lots of info about his trip,” Cory said, showing this author step-by-step exactly how he was able to find this information. ‘
“Besides his name, frequent flyer number and other [personally identifiable information], I was able to get his record locator (a.k.a. “record key” for the Lufthansa flight he was taking that day,” Cory said. “I then proceeded to Lufthansa’s website and using his last name (which was encoded in the barcode) and the record locator was able to get access to his entire account. Not only could I see this one flight, but I could see ANY future flights that were booked to his frequent flyer number from the Star Alliance.
The access granted by Lufthansa’s site also included his friend’s phone number, and the name of the person who booked the flight. More worrisome, Cory now had the ability to view all future flights tied to that frequent flyer account, change seats for the ticketed passengers, and even cancel any future flights.
Please SHARE this alarming and important safety information with your friends and family!”