SEC secretly bought over a billion airline ticketing records to monitor flights worldwide

Full text

The Securities and Exchange Commission (SEC) bought access to what it described as more than a billion airline ticketing records, related to not just U.S. domestic flights or those landing in the country, but also flights between foreign countries, according to SEC documents obtained by 404 Media. A group of the world’s airlines, including Delta, United, and American, previously sold the data under the company name ARC; that is where the SEC bought the data from.

ARC, or the Airlines Reporting Corporation, stopped selling airline ticketing records after repeated coverage from 404 Media and pressure from lawmakers last year. But the newly obtained records provide additional insight into the breadth of data that airlines were selling without their customers' knowledge, and that law enforcement agencies were tapping into, likely without a warrant.

“ARC's ticketing data includes not only US domestic flights and international flights to/from the US, but also flights entirely between or within foreign countries,” one of the documents obtained by 404 Media reads. 404 Media obtained them through a Freedom of Information Act (FOIA) request with the SEC.

The data includes each passengers’ name, their credit card number used to buy the ticket, the departure and arrival cities of their travel, the date of their flight, the flight number, and the “selling agency,” likely referring to the travel agency the person used, according to the documents. ARC obtained its data by acting as the conduit between airlines and travel agencies. Whenever someone booked a flight with a travel agency like Expedia or Kayak, ARC received information about that booking and then resold it as part of its data broker business.

💡

Do you know about any other companies selling data to the government? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.

ARC’s Travel Intelligence Program (TIP), as the data product was called, was also capable of sending daily search results related to a specific list of names, the document says. “ARC sends daily reports regarding any air ticketing purchased by individuals over the prior 24 hours),” it adds. The document says SEC required access to 1-25 daily searches through this alert service.

The SEC did not respond to a request for comment.

ARC previously told 404 Media that TIP “was established by ARC after the September 11, 2001, terrorist attacks and has since been used by the U.S. intelligence and law enforcement community to support national security and prevent criminal activity with bipartisan support. Over the years, TIP has likely contributed to the prevention and apprehension of criminals involved in human trafficking, drug trafficking, money laundering, sex trafficking, national security threats, terrorism and other imminent threats of harm to the United States.”