Sign up for our FREE Monthly Email Newsletter
In addition to keeping in the financial know, you may be interested in checking your credit score and report.
¹The credit scores provided under the offers described here use the Equifax Credit Score, which is a proprietary credit model developed by Equifax. The Equifax Credit Score and 3-Bureau scores are each based on the Equifax Credit Score model, but calculated using the information in your Equifax, Experian and TransUnion credit files. The Equifax Credit Score is intended for your own educational use. It is also commercially available to third parties along with numerous other credit scores and models in the marketplace. Please keep in mind third parties are likely to use a different score when evaluating your creditworthiness. Also, third parties will take into consideration items other than your credit score or information found in your credit file, such as your income.
²The Automatic Fraud Alert feature is made available to consumers by Equifax Information Services LLC and fulfilled on its behalf by Equifax Consumer Services LLC.
³Equifax Credit Report Control™ is only available while you have a current subscription to Equifax Complete Premier. Locking your credit file with Equifax Credit Report Control will prevent access to your Equifax credit file by certain third parties, such as credit grantors or other companies and agencies. Credit Report Control will not prevent access to your credit file at any other credit reporting agency, and will not prevent access to your Equifax credit file by companies like Equifax Personal Solutions which provide you with access to your credit report or credit score or monitor your credit file; Federal, state and local government agencies; companies reviewing your application for employment; companies that have a current account or relationship with you, and collection agencies acting on behalf of those whom you owe; for fraud detection and prevention purposes; and companies that wish to make pre-approved offers of credit or insurance to you. To opt out of such pre-approved offers, visit www.optoutprescreen.com/.
4We will require you to provide your payment information when you sign up and we will immediately charge your card $4.95. After that, we will charge the card $19.95 for each month you continue your subscription. You may cancel at any time; however, we do not provide partial month refunds.
Equifax® is a registered trademark and Equifax Complete™ Premier is a trademark of Equifax, Inc. © 2014, Equifax Inc., Atlanta, Georgia. All rights reserved.
The next time you walk off of a plane, you may want to think twice before tossing your boarding pass in the trash and resist the temptation to share a picture of it on social media. The same barcodes that help you speed through the airport could also risk exposing your personal data.
A few months ago, Brian Krebs, creator of the blog Krebs On Security, was contacted by Cory, one of his readers, who had made an unsettling discovery about a boarding pass his friend had posted on social media. He noticed the barcode on the pass and wondered if someone could use the information within that code to gain access to a passenger’s personal details.
It turns out that his hunch was right.
In minutes, Cory was able to use the Inlite Research website, to decode the barcode directly from the snapshot, obtaining details not only about the flight, but also about his friend, including his name and his ticket’s record locator number, the tracking code used by the airline to archive purchased flight. Once he had the locator number, Cory went to the airline’s website and was able to access his friend’s account, including details about his upcoming flights—all using only the information found on the boarding pass.
Imagine all of this information falling into the wrong hands.
“It really is a wake-up call to people in general—how much of our personal information is out there on different types of documents,” says Scott N. Schober, cybersecurity expert and author of the upcoming book “Hacked Again.” “But most people don’t think much about the boarding pass.”
Concerns about boarding pass security are not new
This isn’t the first time passengers and the media have raised alarms. In 2011, a Forbes reporter typed his own boarding pass record locator into a public access computer located in the airline lounge and was able to access his future itineraries and update sensitive personal information without a password.
Even though no two airlines include precisely the same personal or account information on their boarding passes, having that much information on a piece of paper that most people toss into the nearest trash can is concerning.
The information, found in both QR codes and two-dimensional barcodes, could help data thieves find their way into anyone’s frequent flyer account.
This means that the trend of posting used boarding passes on social media to share your latest adventures with your friends could also enable thieves to figure out your passwords or reset your sign-in credentials using clues that appear on the pass or within the barcode, such as your date of birth or mother’s maiden name. “You really need to stop and think before you post your boarding pass,” says Schober.
Encryption-based solutions such as the HD barcode do exist and could make it more difficult for an outsider to decipher the information on boarding passes. The problem is that these solutions are expensive for airlines and harder to install.
Protect your boarding pass—and your identity—when traveling
Schober shared a few tips that might help you and your family travel more safely this holiday season.
The information contained in this blog post is designed to generally educate and inform visitors to the Equifax Finance Blog. The blog posts do not give, and should not be assumed to provide, personalized tax, investment, real estate, legal, retirement, credit, personal financial, or other professional advice. Before making any financial decision, you should always consult with the appropriate professionals who can explain your options, rights, and legal responsibilities, and advise you on any tax, legal, credit, or business implications that may result from those decisions. The views and opinions expressed by the authors of blog posts are their own views and may not be the views or opinions of Equifax, Inc. and/or its affiliates.
Equifax maintains this interactive forum for education and information purposes in order to allow individuals to share their relevant knowledge and opinions with other members and visitors. We encourage you to participate in discussions about personal finance issues and other topics of interest to this community, but please read our commenting guidelines first. Equifax reserves the right to monitor postings to the forum and comments will be published at our discretion. Do you have questions or comments about your Equifax credit report or customer-service issues regarding an Equifax product? If so, please contact Equifax directly. All opinions and information expressed or shared in blog comments are solely those of the person submitting the comments, and don't necessarily represent the views of Equifax or its management.