Mods.. if this belongs in a better thread, please merge it.

I just received an email telling me that there is a change to my trip (MCT violation/misconnect).... except, it isn't my trip.

I thought that this was a phishing attempt, since the email wasn't formatted quite right, but a look at the message header and the email links (without clicking any) looked legit. Out of curiosity, I was able to look up the reservation on delta.dumb with the record locator, person's name, see the trip details, receipt, SkyMiles number and status... I have no idea who this person is.

I thought perhaps my account has been compromised, but I see nothing wrong in my own account activity. This seems pretty concerning since I could theoretically just wreck this person's trip with the information I have.

Has anyone else seen the same thing? How to best report such an issue?