Skift Take

Impacted airlines moved quickly to fix the URL issue. However, it's possible that the hack has been quietly used before. The incident highlights how even the slightest technical oversight can have a huge impact on operations.

Swap a few letters on the URL to access your next mobile boarding pass and you might end up in a better seat, on a different flight or with a new airline.

Dani Grant, a BuzzFeed intern, publicized the issue on Medium with a short post showing the swap was possible, but not how specifically to do it.

Grant reported it is possible to access another flyer’s boarding pass on the same airline as well as switch airlines altogether. Delta Air Lines and Southwest Airlines were the two airlines found susceptible to URL tinkering.

Skift spoke with representatives of Delta and Southwest, both of whom say they have addressed and fixed the issue since becoming aware of it late Monday night.

“After a possible issue with our mobile boarding passes was discovered late Monday, our IT teams quickly put a solution in place this morning to prevent it from occurring,” says Delta spokesperson Paul Skrbec.

“As our overall investigation of this issue continues, there has been no impact to flight safety, and at this time we are not aware of any compromised customer accounts.”

A Southwest spokesperson echoed the sentiment. However, neither airline could confirm that this flaw hasn’t been used to board a plane in the past.

“As soon as we became aware of the issue we contacted the vendor that powers the mobile boarding functionality to quickly resolve the situation. Upon notification the issue was immediately eliminated and we do not have reports of Southwest customers being impacted,” a statement from the airline read.

“We will continue to monitor the event and are currently engaged in conversation with our vendor.”

A JetBlue spokesperson said the airline was not impacted by the security flaw that impacted Delta and Southwest.

“Our URLs are not susceptible as we have unique URLS that requires multiple aligned strings of data,” she says.

Uncover the next wave of innovation in travel.
June 4 in New York City
See Who's Coming

Have a confidential tip for Skift? Get in touch

Tags: boarding passes, delta air lines

Photo credit: In this Friday, Sept. 27, 2013, photo, Delta Air Lines passengers, who have purchased an upgrade to board their flight early, take advantage of priority boarding as they make their way to their flight at Hartsfield-Jackson Atlanta International Airport in Atlanta. John Amis / Associated Press

Up Next

Loading next stories