Major U.S. airlines sold passenger travel records to Customs and Border Protection (CBP) for just $11,025, according to internal CBP documents obtained by 404 Media.
The report revealed that the sale of the data, which included names, flight routes, and credit card details, was carried out by the Airlines Reporting Corporation (ARC), a broker owned and operated by major carriers including American, Delta, United, Southwest, Alaska, JetBlue, and Air Canada.
ARC typically acts as an intermediary between airlines and travel agencies. Over 240 airlines rely on the company for ticket settlement services.
According to contract documents obtained by 404 Media, CBP was instructed not to name ARC as the data source unless legally forced. “Do not publicly identify [the] vendor, or its employees, individually or collectively, as the source of the Reports,” one clause reads.
The contract reportedly began in June 2024 and could run through 2029. According to documents, just last month, CBP extended the agreement with an additional payment of $6,847.50, bringing the total value to just under $18,000.
In response, CBP, which is part of the Department of Homeland Security (DHS), said the data acquired through ARC helps federal, state, and local law enforcement track persons of interests’ air travel across the country.
CBP added that the data is only used when an Office of Professional Responsibility (OPR) investigation is open, and the agency needs to locate someone related to that investigation.
“CBP is committed to protecting individuals’ privacy during the execution of its mission to protect the American people, safeguard our borders, and enhance the nation’s economic prosperity. CBP follows a robust privacy policy as we protect the homeland through the air, land and maritime environments against illegal entry, illicit activity or other threats to national sovereignty and economic security,” a CBP spokesperson said in a statement.
Meanwhile, privacy experts said the practice highlights a growing trend of law enforcement agencies purchasing access to sensitive personal data to bypass court oversight.
“The government seems intent on using data brokers to buy their way around important guardrails,” said Jake Laperruque of the Center for Democracy & Technology.
Senator Ron Wyden called the deal “shady” and said he’s contacting the airlines that own ARC to find out why they allowed it.
The airlines involved declined to comment on the report.
