220 million traveler records exposed in Vietnam-linked APIS leak

Massive data breach sees 220 million traveler records exposed — nine years of airline info leaked including passenger and passport details

A series of misconfigurations allowed researchers to access a treasure trove of sensitive data - the archive has since been locked down.

220 million passenger records exposed in Vietnam leak

A misconfigured Elasticsearch database exposed passport numbers and flight histories for 220 million travelers linked to Vietnam's APIS system.

220 million traveler records exposed in Vietnam-linked APIS leak

Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing names, passport numbers, dates of birth, nationalities, and flight details spanning 2017 to 2026. Researchers accessed the Vietnam-linked system through a cloud-based path using default credentials. [...]

Exposed Database Left 220Mn Airline Passenger, Crew Records Open To The Internet

A misconfigured Elasticsearch cluster exposed roughly 220.8 million airline passenger and crew records, including passport numbers and full itineraries, before it was secured in June, researchers at Kinryu Labs disclosed. The records spanned January 2017 through April 2026 and came from an Advance Passenger Information System deployment - the standardized data feed airlines transmit to border authorities before departure, covering traveler ident…

220 Million Travel Records Exposed in APIS Database Leak

More than 220 million passenger and crew records were exposed through APIS database misconfigurations, highlighting major risks for travel and aviation systems.