Itinerary data is information linking a person to travel plans, such as dates, destinations, accommodation, or booking details. When associated with identifying or contact information, it can reveal where someone will be and when they may be away from home.
In cyber security, exposed itinerary data can enable convincing booking-related scams and other targeted social engineering. Organizations that handle reservations should minimize the data they retain, restrict access to it, and monitor systems for unauthorized activity. Travelers should verify unexpected booking messages through a trusted channel. Exposure creates a potential risk; it does not by itself prove that the information was misused.