OneFly exposed thousands of travel records including credit cards, ID documents, and flight details through an unsecured Elasticsearch instance discovered in October 2025.
Learn how to diagnose and fix SAML bad assertion errors. A technical guide for CTOs on resolving clock skew, audience mismatches, and signature failures in SSO.
Business-to-business travel consolidator OneFly has left thousands of sensitive passenger records exposed to the open web.