A travel record is data tied to a passenger trip, such as a booking reference, itinerary, ticket number, dates, routes, or contact details. In airline and airport systems, these records may also include reservation metadata and service notes that help staff identify a traveler and manage the journey.
Travel records matter in cyber security because they are actionable, not just private. Attackers can use them to make phishing emails, fake support calls, or password-reset requests look genuine by referencing real trip details. Defenders treat them as sensitive data: they should be access-controlled, logged, encrypted where possible, and shared only with partners that truly need them. Redacting or limiting itinerary detail also reduces the value of a leak for social engineering and fraud.