SEC Bought Access to Global Airline Ticketing Database Holding Over One Billion Records
Documents reveal the financial regulator used a Freedom of Information Act workaround to purchase passenger data without a warrant.
Quick Look
The SEC purchased access to a global airline ticketing database with over one billion records, using a data broker loophole to monitor travel patterns without a warrant.
AI-generated summary
Why It Matters
The SEC purchased airline ticketing records from the Airlines Reporting Corporation without a court order.
The Securities and Exchange Commission bought access to a worldwide airline ticketing database holding more than one billion records, according to SEC documents obtained by 404 Media through a Freedom of Information Act request.
The data came from Airlines Reporting Corporation, a clearinghouse co-owned by American, Delta, and United that sits between carriers and travel agencies, and resold bookings made through sites like Expedia and Kayak.
The records held passengers' names, the credit cards used to buy tickets, departure and arrival cities, and flight numbers. More than that, the SEC's subscription included an alert system that checked new bookings against a list of people it was monitoring, flagging travel from the prior 24 hours, with the agency requesting between one and 25 of these alerts a day.
No court order was needed; the government simply bought the data, likely without a warrant.
The SEC is a financial regulator, not a spy agency. Its job is to protect American consumers from insider trading, fraud, and market manipulation. But the same travel and payment trail it purchased is exactly the one crypto holders leave behind: a credit card tied to an exchange account, a flight to a conference, a border crossing. When the state can watch both the chain and the boarding pass, the line between market cop and surveillance arm gets thin.
A year into the second Donald Trump presidency, the SEC has pulled back from major crypto enforcement while the data-broker workaround lets agencies skip the warrant they'd need if they demanded the records directly.
The IRS has been expanding its own surveillance of crypto investors through the same playbook. The SEC’s Coinbase probe of a year ago showed the same appetite for user data. The question is less whether the SEC wants the information than how it gets it.
The loophole, again
Critics call it the data broker loophole: buy what you can't subpoena. ARC's Travel Intelligence Program sold the same post-9/11 surveillance infrastructure to the FBI, IRS, and Homeland Security before pressure from lawmakers forced its shutdown in 2025.
The newly released documents show its reach was wider than known—foreign-to-foreign journeys sat in the system alongside domestic ones.
Open Questions
- How long did the SEC maintain its subscription?
- Which specific individuals were flagged in the alert system?
