And because we live in a time of codesharing agreements between different airlines, it's possible to use a PNR to log into five or more airline websites—at which point criminals usually carry out an attack with relative ease and gain access to additional personal information or fraudulently obtain flights for free.