Technology
Holiday travel privacy risks and how to stay safe
NEWYou can now listen to Fox News articles!
Holiday travel is stressful enough with crowded airports, expensive flights and last-minute itinerary changes. But there’s a hidden part of the travel industry most people don’t know about: your personal data is being harvested, packaged and sold every time you book a flight, reserve a hotel room or check a travel app.
Whether you’re traveling for a Christmas break or booking early for New Year’s, the companies you trust with your most sensitive details—full name, home address, passport info, travel dates and device data—are sharing and selling far more than you think.
And during the holiday rush, that data becomes a goldmine for scammers.
Let’s unpack how this works, which companies collect the most and what you can do before you travel to keep your personal information out of the wrong hands.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
PROTECT YOUR DATA BEFORE HOLIDAY SHOPPING SCAMS STRIKE
Holiday travel brings more than stress because every booking and check-in quietly generates personal data you may not realize you are giving away. (iStock)
Why holiday travel puts your data at risk
The holiday season is the peak period for travel-related data collection. Airlines, hotels, booking platforms, loyalty programs and travel apps all experience massive traffic spikes—millions of Americans are searching for deals, comparing prices, checking gate changes and re-booking delayed flights.
Every one of those actions creates trackable data points, including:
- Email address
- Phone number
- Full name and DOB
- Address history
- Travel itineraries
- Passport or ID data
- Device fingerprint
- IP address and location
- Shopping habits and spending patterns.
You might assume this data stays with the airline or hotel. It doesn’t.
Most companies share it with advertisers, analytics firms, data brokers and dozens of unnamed “partners.” Some even use your data to profile you—how often you travel, how much you’ll likely spend and whether you’re a “high-value” target.
That information can easily leak into scammer databases, which is why holiday travelers suddenly see:
- Fake “your flight is canceled” texts
- Phishing emails that look identical to hotel confirmations
- Bogus baggage fee requests
- Fake TSA PreCheck renewal notices
- “Urgent re-verification required” messages.
Scammers rely on the fact that you’re stressed, rushing and expecting travel updates. And because they already have your personal data, their attacks are frighteningly convincing.
STOP FOREIGN-OWNED APPS FROM HARVESTING YOUR PERSONAL DATA
Airlines, hotels, apps and booking platforms collect far more information than most travelers know and that data often gets shared with advertisers and data brokers. (AP Photo/Ryan Sun)
Examples of what major travel companies collect
Here are real-world examples of how holiday travel platforms collect and share your data:
1) Airlines (Delta, American, United, Southwest)
Major U.S. airlines collect not just your name, phone number and email, but also travel companions, payment details, geolocation data, device data and loyalty-program activity.
They share this with:
- “Marketing partners”
- Analytics platforms
- Third-party advertisers
- Data-enrichment firms.
Many of these partners, over time, become part of the data broker ecosystem.
2) Booking platforms (Expedia, Booking.com, Hotels.com)
Each booking platform details what it collects in its privacy policy. Oftentimes, these sites track:
- Search history
- Price views
- Device fingerprint
- Click behavior
- IP-based location
- Payment attempts—even abandoned carts.
This is used to build profiles that determine what deals you’re shown and how aggressively you’re targeted.
3) Hotel chains (Marriott, Hilton, IHG)
Marriott’s privacy policy and other privacy statements list over 60 categories of data it collects. Some chains were caught sharing guest data with:
- Ad networks
- Social media platforms
- Third-party “guest experience” tools
- Affiliate networks
- Data brokers for cross-device tracking.
Cybercriminals have been using the information of over 500 million Marriott guests, exposed during a four-year-long breach that started in 2014, to craft and execute travel-themed scams to this day.
4) Travel apps (Airbnb, Hopper, KAYAK, TripIt)
These are some of the most aggressive data collectors because they run nonstop on your phone. Many collect:
- Real-time location
- Contacts
- Clipboard data
- Behavioral analytics
- Device ID
- In-app browsing.
Some of these firms then “share information with partners for marketing enhancement,” which is typically code for data selling.
YOUR DISCARDED LUGGAGE TAGS ARE WORTH MONEY TO SCAMMERS
Scammers use leaked travel details to send fake flight alerts, hotel messages and urgent payment notices that look real because they already have your personal information. (iStock)
How scammers use your travel data
Once your information enters the ecosystem, scammers build travel-themed attacks designed to hit you at the worst possible time. Some common examples include:
- Fake airline notifications: (e.g., “Your flight has been canceled, click here to rebook”)
- Urgent hotel “payment failure” emails: Scammers use leaked address and booking data to send emails that look exactly like they’re from the Hilton or Marriott
- Fake baggage fees: (e.g., “Pay $24.90 to release your checked bag”)
- TSA and Global Entry renewal scams.
This isn’t guesswork. They already have your name, flight, hotel, location and travel dates—because the travel industry’s data partners sold or leaked them.
How to protect yourself before you travel
Here are my top steps to staying private this holiday season:
1) Check what data the travel companies already have
Hotels, airlines and booking sites all have data removal options—though they’re buried in their privacy settings.
2) Stop apps from tracking your location
Turn off location permissions for apps like:
- Hopper
- Airbnb
- Expedia
- HotelTonight.
Many track you even when not in use. Here’s how to do it for iPhone and Android:
On iPhone: Open Settings, tap Privacy & Security, then tap Location Services, scroll down to the app and tap each app, and set location access to “While Using the App” or “Never,” and turn off “Share My Location” if you don’t want them to see your exact spot.
On Android: Open Settings, tap Location, then choose App location permissions or App permissions, find the app and tap it, and change each one to “Allow only while using the app” or “Don’t allow” so they can’t track you in the background. (Settings may vary depending on your Android phone’s manufacturer.)
3) Remove your personal data from data broker sites
This is the most important step. Even if you stop airlines and hotels from collecting new data, your existing data is already circulating through dozens of data brokers, and that’s what scammers use to target travelers.
Data brokers hold:
- Your travel patterns
- Address history
- Email and phone details
- Income level
- Household info
- Your family members’ names.
You can manually request removal from hundreds of sites, but it takes months. That’s why I recommend a data removal service. While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com
4) Use an email alias for bookings
An alias email reduces the amount of spam and phishing attempts you’ll receive. By creating email aliases, you can also protect your information. These aliases forward messages to your primary address, making it easier to manage incoming communications and avoid data breaches.
For recommendations on private and secure email providers that offer alias addresses, visit Cyberguy.com
5) Avoid airport Wi-Fi for anything involving payments
Scammers often run fake hotspots. So, avoid airport public Wi-Fi when accessing financial information.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Kurt’s key takeaways
The holiday season is here, and many of us are getting ready to travel to see family and friends. As travel picks up, personal data collection and sharing also increases. Airlines, hotels and travel apps often share your information with unknown third parties, which scammers can use to target you during your trip. Before you pack your bags, take a few minutes to remove your personal data from online brokers. Doing this helps protect your identity and lets you travel with peace of mind.
How do you protect your personal information when you travel during the holidays? Let us know by writing to us at Cyberguy.com
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Meta expands nuclear power ambitions to include Bill Gates’ startup
These AI projects include Prometheus, the first of several supercluster computing systems, which is expected to come online in New Albany, Ohio, sometime this year. Meta is funding the construction of new nuclear reactors as part of the agreements, the first of which may come online “as early as 2030.” These announcements are part of Meta’s ongoing goal to support its future AI operations with nuclear energy, having previously signed a deal with Constellation to revive an aging nuclear power plant last year.
Financial information for the agreements hasn’t been released, but Meta says that it will “pay the full costs for energy used by our data centers so consumers don’t bear these expenses.”
“Our agreements with Vistra, TerraPower, Oklo, and Constellation make Meta one of the most significant corporate purchasers of nuclear energy in American history,” Meta’s chief global affairs officer, Joel Kaplan, said in the announcement. “State-of-the-art data centers and AI infrastructure are essential to securing America’s position as a global leader in AI.”
Technology
Why January is the best time to remove personal data online
NEWYou can now listen to Fox News articles!
January feels like a reset. A new calendar. New goals. New habits. While you clean out your inbox, organize paperwork or set resolutions, however, scammers also hit reset, and they start with your personal data.
That is because January is one of the most important months for online privacy. This is when data brokers refresh profiles and scammers rebuild their target lists.
As a result, the longer your information stays online, the more complete and valuable your profile becomes. To help address this, institutions like the U.S. Department of the Treasury have released advisories urging people to stay vigilant and avoid data-related scams.
For that reason, taking action early in the year can significantly reduce scam attempts, lower identity theft risks, and limit unwanted exposure for the rest of the year.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
January is when data brokers refresh profiles and scammers rebuild target lists, making early action critical for online privacy. (iStock)
STOP DATA BROKERS FROM SELLING YOUR INFORMATION ONLINE
Why personal data does not expire and keeps compounding online
Many people assume old information eventually becomes useless. Unfortunately, that’s not how data brokers work.
Data brokers don’t just store a snapshot of who you are today. They build living profiles that grow over time, pulling from:
- Public records (property sales, court filings, voter registrations)
- Retail purchases and loyalty programs
- App usage and location data
- Past addresses, phone numbers, and relatives
- Marketing databases and online activity.
Each year adds another layer. A new address. A changed phone number. A family connection. A retirement milestone. On its own, one data point doesn’t mean much. But together, they create a detailed identity profile that scammers can use to convincingly impersonate you. That’s why waiting makes things worse, not better.
Why scammers ‘rebuild’ targets at the start of the year
Scammers don’t randomly target people. They work from lists. At the beginning of the year, those lists get refreshed.
Why January matters so much:
- Data brokers update and resell profiles after year-end records close
- New public filings from the previous year become searchable
- Marketing databases reset campaigns and audience segments
- Scam networks repackage data into “fresh” target lists.
Think of it like the upcoming spring cleaning, except it’s criminals organizing identities to exploit for the next 12 months.
If your data is still widely exposed in January, you’re far more likely to:
Once your profile is flagged as responsive or profitable, it often stays in circulation.
As personal information accumulates across databases, digital profiles grow more detailed and more valuable to scammers over time. (Kurt “CyberGuy” Knutsson)
Why taking action in January protects you all year long
Removing your data early isn’t just about stopping scams today; it’s about cutting off the supply chain that fuels them. When your information is removed from data broker databases:
- It’s harder for scammers to find accurate contact details
- Phishing messages become less convincing
- Impersonation attempts fail more often
- Your identity becomes less valuable to resell.
This has a compounding benefit in the opposite direction. The fewer lists you appear on in January, the fewer times your data gets reused, resold, and recycled throughout the year. That’s why I consistently recommend addressing data exposure before problems start, not after.
Why retirees and families feel the impact first
January is especially important for retirees and families because they’re more likely to become targets of fraud, scams, and other crimes.
Retirees often have:
- Long addresses and employment histories
- Stable credit profiles
- Fewer active credit applications
- Public retirement and property records
Families add another layer of risk:
- Relatives are linked together in broker profiles
- One exposed family member can expose others
- Shared addresses and phone plans increase visibility
Scammers know this. That’s why households with established financial histories are prioritized early in the year.
Why quick fixes don’t work
Many people try to “start fresh” in January by:
Those steps help, but they don’t remove your data from broker databases. Credit monitoring services alert you after something goes wrong. Password changes don’t affect public profiles. And unsubscribing doesn’t stop data resale. If your personal information is still sitting in hundreds of databases, scammers can find you.
The January privacy reset that actually works
If you want fewer scam attempts for the rest of the year, the most effective step is removing your personal data at the source.
You can do this in one of two ways. You can submit removal requests yourself, or you can use a professional data removal service to handle the process for you.
Removing your data yourself
Manually removing your data means identifying dozens or even hundreds of data broker websites, finding their opt-out forms and submitting removal requests one by one. You also need to verify your identity, track responses and repeat the process whenever your information reappears.
This approach works, but it requires time, organization, and ongoing follow-up.
Using a data removal service
A data removal service handles this process on your behalf. These services typically:
- Send legal data removal requests to large networks of data brokers
- Monitor for reposted information and submit follow-up removals
- Continue tracking your exposure throughout the year
- Manage a process that most people cannot realistically maintain on their own
Removing your data at the start of the year helps reduce scam attempts, phishing messages and identity theft risks all year long. (iStock)
Because these services handle sensitive personal information, it is important to choose one that follows strict security standards and uses verified removal methods.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
RETIREES LOSE MILLIONS TO FAKE HOLIDAY CHARITIES AS SCAMMERS EXPLOIT SEASONAL GENEROSITY
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
Kurt’s key takeaways
Scammers don’t wait for mistakes. They wait for exposed data. January is when profiles are refreshed, lists are rebuilt, and targets are chosen for the year ahead. The longer your personal information stays online, the more complete-and dangerous-your digital profile becomes. The good news? You can stop the cycle. Removing your data now reduces scam attempts, protects your identity, and gives you a quieter, safer year ahead. If you’re going to make one privacy move this year, make it early-and make it count.
Have you ever been surprised by how much of your personal information was already online? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Xbox’s Towerborne is switching from a free-to-play game to a paid one
Towerborne, a side-scrolling action RPG published by Xbox Game Studios that has been available in early access, will officially launch on February 26th. But instead of launching as a free-to-play, always-on online game as originally planned, Towerborne is instead going to be a paid game that you can play offline.
“You will own the complete experience permanently, with offline play and online co-op,” Trisha Stouffer, CEO and president of Towerborne developer Stoic, says in an Xbox Wire blog post. “This change required deep structural rebuilding over the past year, transforming systems originally designed around constant connectivity. The result is a stronger, more accessible, and more player-friendly version of Towerborne — one we’re incredibly proud to bring to launch.”
“After listening to our community during Early Access and Game Preview, we learned players wanted a complete, polished experience without ongoing monetization mechanics,” according to an FAQ. “Moving to a premium model lets us deliver the full game upfront—no live-service grind, no pay-to-win systems—just the best version of Towerborne.”
With the popular live service games like Fortnite and Roblox getting harder to usurp, Towerborne’s switch to a premium, offline-playable experience could make it more enticing for players who don’t want to jump into another time-sucking forever game. It makes Towerborne more appealing to me, at least.
With the 1.0 release of the game, Towerborne will have a “complete” story, new bosses, and a “reworked” difficulty system. You’ll also be able to acquire all in-game cosmetics for free through gameplay, with “no more cosmetic purchasing.” Players who are already part of early access will still be able to play the game.
Towerborne will launch on February 26th on Xbox Series X / S, Xbox on PC, Game Pass, Steam, and PS5. The standard edition will cost $24.99, while the deluxe edition will cost $29.99.
-
Detroit, MI6 days ago2 hospitalized after shooting on Lodge Freeway in Detroit
-
Technology3 days agoPower bank feature creep is out of control
-
Dallas, TX4 days agoDefensive coordinator candidates who could improve Cowboys’ brutal secondary in 2026
-
Health5 days agoViral New Year reset routine is helping people adopt healthier habits
-
Iowa3 days agoPat McAfee praises Audi Crooks, plays hype song for Iowa State star
-
Nebraska3 days agoOregon State LB transfer Dexter Foster commits to Nebraska
-
Nebraska3 days agoNebraska-based pizza chain Godfather’s Pizza is set to open a new location in Queen Creek
-
Oklahoma1 day agoNeighbors sift debris, help each other after suspected Purcell tornado