[rootsudo]

They have an ecomm team and info sec team but they’re pretty unwilling to fix this. They do agile but no one wants to own this, especially in December since they have change freezes and this will affect the yearly and monthly issues.

I would advise submitting this is the state of Washington and DOT federal and state.

Technically this is a data breach. Atg.wa.gov I would submit a data breach notification this will force them to actively fix it this month otherwise they will sit on it and push it off per agile sprint and do it when it’s convenient for the airline. Post holiday rush.

[StressedDev]

How do you know they are unwilling to fix this? My guess is it has not been fixed because the people who can fix the bug do not know it exists.