How I found that anyone with a boarding pass photo can pull full passport numbers, home addresses, children's dates of birth, credit card details, and Known Traveler Numbers for every passenger on a Frontier Airlines booking. Reported March 3rd. Still live 105 days later.
Bug bounties because it appears communication went off the rails when he started asking them for money.
That’s why I said both players in this story are in the wrong. It’s a case study in how NOT to handle responsible disclosure.