FlightAware configuration error leaked user data for years

FlightAware disclosed a configuration error that potentially exposed user account data (including user IDs, passwords, email addresses, and in some cases names, addresses, phone numbers, partial credit card details, SSNs, and account activity) from January 1, 2021 until discovery on July 25, 2024; affected users will be required to reset passwords and are being offered 24 months of identity protection through Equifax.