A Southwest Airlines customer learned an expensive lesson about sharing sensitive information online after posting a photo of her $1,000 flight voucher on Threads. The image reportedly exposed the voucher’s security codes, allowing other users to redeem nearly the entire balance and leaving her with just $6.07.
The incident highlights how seemingly harmless social media posts can expose valuable credentials. Flight vouchers, gift cards, event tickets, and promotional credits can contain confirmation numbers, PINs, barcodes, QR codes, or security codes that may be enough for someone else to access or redeem them.
Cybercriminals can also use automated tools to monitor public social media posts for exposed credentials. Once sensitive information is published, deleting the post may not be enough because screenshots and copies can be made almost instantly.
Before posting vouchers, tickets, gift cards, or travel documents online, users should completely cover or blur all identifying numbers, barcodes, QR codes, PINs, and security codes. When in doubt, avoid sharing the document altogether.