Originally Posted by
Sigwx
If you’ve posted anything at all that contains your PNR, and your surname is either visible or part of your social media account name/handle they have everything they need to access your booking and call you up with the details any of you can see on MMB.
In which case why do airlines continue to print the PNR on luggage labels which also shows the passenger's last name. Any baggage label visible to a bad actor during someone's trip contains all the information necessary to do a lot of damage. It makes no sense to me.