I never use Kayak (I always book directly with airline / hotel) but I saw this thread and, like others have said, a quick "guess" got me an abundance of information. Really, really bad.
While I know it is good to inform the FT community of issues like this - it might not be a good idea to post security compromises so publicly. You never know how "trustworthy" everyone here really is.