Israeli airline El Al’s booking software vulnerability exposed airline passenger name records. El Al uses a booking system from Amadeus, a Madrid-based company that works with 500 airlines, including United Airlines and Air Canada. An attacker could access someone else’s booking information using the booking reference number and the last name of a passenger. The vulnerability was discovered by security researcher Noam Rotem, who works at the security company Safety Detective, who discovered the flaw while booking his own flight. The company says it has not detected any data breach and that no data was disclosed.”]
Source: https://www.govinfosecurity.com/airline-booking-system-exposed-passenger-details-a-11952