The FlightAware platform serves real-time flight-tracking data to its 13 million users, which include aircraft operators.
That includes your account credentials, passwords, email, and username.
But also other personal info that you shared with FlightAware.
Jag_cz / Shutterstock
Not everyone has shared every piece of that info, so the exposure could vary between users.
For aircraft operators, their title, flight activity, and pilot status could also have been exposed.
FlightAware has since patched the bad configuration file that caused this whole mess.
It is also forcing people to change passwords.
Out of an abundance of caution, we are requiring you to reset your password, the notification explained.
Its free for 24 months but it has to be enabled manually through promotion codes.
Source:State of CaliforniaviaBleeping Computer