Ars editor learns feds have his old IP addresses, full credit card numbers

  • 19 July 2014
  • 1 reply
  • 218 views

Userlevel 7
Badge +54
This is a bit disturbing pretty much everything is stored away. We all are coming to terms with it now that every transaction is recorded but it is getting to the stage where no data about you held by any company is forgotten.
 

FOIA request turns up 9 years of records, including plaintext credit card numbers.

by Cyrus Farivar - July 19 2014
 


 
"In May 2014, I reported on my efforts to learn what the feds know about me whenever I enter and exit the country. In particular, I wanted my Passenger Name Records (PNR), data created by airlines, hotels, and cruise ships whenever travel is booked.
But instead of providing what I had requested, the United States Customs and Border Protection (CBP) turned over only basic information about my travel going back to 1994. So I appealed—and without explanation, the government recently turned over the actual PNRs I had requested the first time.
The 76 new pages of data, covering 2005 through 2013, show that CBP retains massive amounts of data on us when we travel internationally. My own PNRs include not just every mailing address, e-mail, and phone number I've ever used; some of them also contain:
  • The IP address that I used to buy the ticket
  • My credit card number (in full)
  • The language I used
  • Notes on my phone calls to airlines, even for something as minor as a seat change"
Full Article

1 reply

Userlevel 7
"This suggests that US transportation security officials are inefficient"  I agree totally, in my opinion, TSA needs better traing, the entire process needs to be looked at and revamped.
 
Keeping credit card #'s for the purpose of catching those that are stealing them would be a different story, but thats not why they are doing it.
 
If they feel that keeping all that info helps to determine who the "problem" people may be, so be it. However there is absolutely NO excuse for holding on to full credit card #'s. The type of card and maybe last 4 digits is MORE than enough, and I can not understand what good it does them.
 

Reply