WHAT do you do with your boarding pass after your flight lands?
Do you:
a) Leave it in the seatback pocket?
b) Throw it away?
c) Have no idea where it ended up, but feel grateful that it’s your boarding pass and not your smartphone that you misplaced?
d) Take it home with you and feed it through a paper shredder?
I’m sure not very many of you answered d). A boarding pass for a flight that you have already boarded is about as valuable as a ticket to a concert that already happened. Unless it’s one that you want to remember for the rest of your life, you won’t be holding on to any keepsakes.
But if you answered a), b), or c), you could be opening yourself up to “hackers, identity thieves or even stalkers”. That’s according to CBS News, which published a recent report on the sensitive information contained in a boarding pass. It all began when someone was able to scan another passengers pass’s barcode and uncover a trove of personal information. It revealed not only the friend’s name and frequent flyer number, but also his flight record locator, which could be used on the airlines website to view future bookings. The hacker could now change his friend’s seats and even cancel flights.
Well, you may counter, what that really means is that the entire paper boarding pass should be protected vigilantly from falling into the wrong hands. It is true that information on a boarding pass gets strangers one step closer to your airline account. But these accounts, Ms Hill writes, require a PIN or password. And while a frequent flyer number can let people reset your PIN or password, they still have to answer a security question to complete the process.
That’s not necessarily a tall order, though. The security question is usually the most common one around: What is your mother’s maiden name? That information can often be found easily on a person’s Facebook page, particularly if the mother’s relatives have her maiden name as their last name.
All of this goes to show that yes, airlines should probably not make data available through a barcode scanner that they don’t want to make available on a printed boarding pass. And yes, you are probably better off using an electronic boarding pass on your phone, inconvenient though it may sometimes be. But the biggest takeaway is simply that your personal data are a lot easier to hack than you probably think. A wide range of seemingly harmless slips of paper, containing your name and an identifying detail or two, can open you up to a hacker’s attack. So the next time you check for your personal belongings as you exit a plane, you might want to make sure your boarding pass is among them.