Hackers May Attack Travelers Rewards Points and Miles

Image: Be careful where you use your credit card. (Photo Credit: iStock / Getty Images Plus / Sinenkiy)
Image: Be careful where you use your credit card. (Photo Credit: iStock / Getty Images Plus / Sinenkiy)
Rich Thomaselli
by Rich Thomaselli
Last updated: 4:40 PM ET, Tue August 15, 2023

Mostly, hackers are looking to scam you out of your bank account or credit cards.

But they could also deplete your travel rewards card and relieve you of all your hard-earned miles.

Frequent flyer miles and loyalty points can be just as important as currency. Heck, they even made a movie about the accumulation of frequent flyer points called Up in the Air starring George Clooney.

This is worrisome, however.

A trio of cyber-sleuths looked up the company that administers many programs, Points.com, and uncovered some troubling news. The researchers found some apparent vulnerabilities in the system from March to May of this year that could have compromised the points.

That is, hackers could have stolen your reward points.

They could have helped themselves to a nice vacation.

The researchers found that the Points.com system allowed hackers to see account numbers, addresses and phone numbers, among other personal things. For United Airlines, for instance, the researchers found a vulnerability that allowed them to hack the system with a secret password – the password was ‘secret.’

Entity by entity, Points.com is fixing its vulnerabilities, including for United Airlines.

However, it was noted that at one point hackers had the ability to get into any rewards points on the system. This allowed the hackers to grant any points they wanted to whomever they wanted. Points.com said that all problems reported to them were fixed, but there still may be vulnerabilities in the system.

In the meantime, you are advised to keep an eye on your rewards points card like it was a credit card or a bank debit card. Be diligent and look for an unusual activity. A high withdrawal of points or miles that don’t look recognizable is a dead giveaway. Change your password often and make it complex. Utilize two-factor authentication if your password is cracked.


For the latest travel news, updates and deals, subscribe to the daily TravelPulse newsletter.

Topics From This Article to Explore

More From TravelPulse

Related Videos

Rich Thomaselli

Rich Thomaselli

Associate Writer

Editor Associate Writer true 9281 14744 Rich Thomaselli has written for TravelPulse since 2014 and has been a professional journalist for nearly 40 years. His work has appeared in USA Today, the New York Times and New York Yankees publications. He is an 11-time writ

Grow Your Travel Business With Certified Courses

Travel Agent Academy
Travel Agent Academy
Majestic Resorts Specialist ProgramDiscover all-inclusive luxury at Majestic Resorts in paradise.
Travel Agent Academy
Travel Agent Academy
Los Cabos Specialist ProgramSell the magic of Los Cabos: luxury, adventure, and endless sunshine.
Travel Agent Academy
Travel Agent Academy
Allianz Specialist ProgramProtect every journey with Allianz Partners Travel Insurance.
Travel Agent Academy
Travel Agent Academy
Majestic Resorts Specialist ProgramDiscover all-inclusive luxury at Majestic Resorts in paradise.
Travel Agent Academy
Travel Agent Academy
Los Cabos Specialist ProgramSell the magic of Los Cabos: luxury, adventure, and endless sunshine.
Travel Agent Academy
Travel Agent Academy
Allianz Specialist ProgramProtect every journey with Allianz Partners Travel Insurance.

Don't Miss These Travel Agent Events and Trainings

Upcoming Webinar
Every Island Tells a Story: Part 2 – Selling the Caribbean Through Immersive ExperiencesWednesday, August 19, 2026
2:00pm Eastern
Continue the journey in the second installment of our Every Island Tells a Story webinar series. This...
Upcoming Webinar
The Art of Destination Recommendation: Alternative Destination Strategies for Travel AdvisorsTuesday, August 18, 2026
2:00pm Eastern
What if your next best sale is a destination your client hasn’t considered—and you’ve never visited?...
Upcoming Webinar
From Interest to Booking: Selling HANKYU × PONANT Japan CruisesFriday, August 21, 2026
4:00pm Eastern
Take the next step in selling HANKYU × PONANT Japan cruises with a practical, advisor focused look at...
Upcoming Webinar
Every Island Tells a Story: Part 2 – Selling the Caribbean Through Immersive ExperiencesWednesday, August 19, 2026
2:00pm Eastern
Continue the journey in the second installment of our Every Island Tells a Story webinar series. This...
Upcoming Webinar
The Art of Destination Recommendation: Alternative Destination Strategies for Travel AdvisorsTuesday, August 18, 2026
2:00pm Eastern
What if your next best sale is a destination your client hasn’t considered—and you’ve never visited?...
Upcoming Webinar
From Interest to Booking: Selling HANKYU × PONANT Japan CruisesFriday, August 21, 2026
4:00pm Eastern
Take the next step in selling HANKYU × PONANT Japan cruises with a practical, advisor focused look at...