US TSA No Fly & Selectee List 2023 Exposure Data Breach
In January 2023, Swiss security researcher maia arson crimew uncovered an unprotected Jenkins server operated by US regional carrier CommuteAir, exposing an unredacted copy of the United States Government's TSA No Fly List and Selectee Screening database.
Exposed Data Types
5- Names
- Dates of birth
- Citizenships
- Security watchlist statuses
- Passport numbers
About This Breach
The compromised repository contains two core datasets totaling 1,817,231 entries: NOFLY.csv (1,566,062 entries) and SELECTEE.csv (251,169 entries). Disclosed data points include full legal names, known aliases, birth dates, claimed nationalities, and government intelligence watchlist identifiers originating from the FBI Terrorist Screening Center (TSC).
The accidental disclosure of classified government aviation security rosters represented a historic national security incident, shedding light on the composition of clandestine screening lists and highlighting vulnerabilities in supply-chain aviation infrastructure.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
