The 404 Media Podcast: "Airlines Sold Your Flight Data to DHS—And Covered It Up"
Release Date: June 18, 2025

Introduction

In this episode of The 404 Media Podcast, hosts Joseph, Sam Cole, Emmanuel Mayberg, and Jason Kebler delve into a startling revelation: major airlines have been selling passengers' flight data to the Department of Homeland Security (DHS) while attempting to conceal this arrangement. Additionally, the podcast explores the burgeoning issue of AI scraping bots disrupting digital libraries, archives, and museums. This comprehensive summary captures the key discussions, insights, and conclusions drawn by the hosts.

Main Story: Airlines and DHS Data Sale

Discovery and Investigation

Joseph kicks off the primary discussion by recounting how he uncovered the story. On May 1, he noticed a new contract between Immigration Customs Enforcement (ICE) and the Airlines Reporting Corporation (ARC) in government procurement databases.

Joseph [04:24]: "I saw that ARC and CBP had a contract, and I filed a FOIA to dig deeper."

By filing Freedom of Information Act (FOIA) requests, Joseph obtained documents revealing that DHS was purchasing extensive flight data from ARC. This data included passenger names, credit card information, and detailed flight itineraries.

Contractual Secrecy

A crucial aspect highlighted is the contractual agreement preventing ARC from disclosing the data source. Joseph reads a significant clause from the contract:

Joseph [06:19]: "The contract between ARC and CBP tells the agency to not publicly identify the vendor or its employees... unless compelled by a court order."

This clause ensures that the airlines remain behind the scenes, obscuring their role in supplying the data.

Scope and Usage of Data

The hosts discuss the breadth of the data sale. ARC, backed by major U.S. airlines including Delta, Southwest, United, American Airlines, Alaska Airlines, JetBlue, Lufthansa, Air France, and Air Canada, serves as a data broker facilitating this transaction.

Jason Kebler [07:32]: "ARC sits in the middle of the transaction between travel agents and airlines, harvesting valuable data."

The data is primarily utilized by DHS's Office of Professional Responsibility (OPR) to investigate internal misconduct within Customs and Border Protection (CBP).

Joseph [13:32]: "CBP stated the data is used for their internal watchdog, OPR, to investigate corrupt or criminal activities."

Privacy and Legal Implications

The conversation shifts to the broader privacy concerns. The data sale operates without explicit legal constraints on its usage beyond the contractual agreement.

Joseph [16:29]: "This isn't being done with a warrant... DHS is buying bulk access to billions of flight records without clear legal limitations."

Jason adds that this arrangement fosters a surveillance relationship where law enforcement feels empowered to utilize the data without adhering to traditional legal processes like obtaining warrants.

Other Agencies Involved

Beyond CBP, other government agencies such as the Secret Service, SEC, DEA, Air Force, U.S. Marshals Service, TSA, and ATF are also purchasers of ARC's flight data. The exact purposes remain largely undisclosed, pending further FOIA responses.

Joseph [14:44]: "Agencies like the Secret Service, DEA, and others are also buying this data, but we don't yet know how they're using it."

Future Investigations

Looking ahead, Joseph and Jason plan to explore additional contracts and examine whether local police forces have access to this data, raising further concerns about widespread surveillance capabilities.

Joseph [21:35]: "We're waiting on contracts from other agencies and investigating whether local police have access to this data."

Secondary Story: AI Scraping Bots Disrupting Cultural Institutions

The Growing Problem

After an advertisement break, the podcast transitions to a report by Emmanuel Mayberg on AI scraping bots negatively impacting libraries, archives, and museums. The issue, quantified for the first time through a survey led by Michael Weinberg of NYU's Glam Elaborate, shows that AI bots are overwhelming these institutions with excessive traffic, leading to service disruptions.

Emmanuel Mayberg [27:02]: "AI scrapers are flooding open resources with traffic, sometimes taking them offline."

Impact on Institutions

A notable case discussed is the University of North Carolina, Chapel Hill, where AI bots caused significant downtime for their extensive online library resources.

Emmanuel Mayberg [31:26]: "UNC's online library became inaccessible due to constant spam from AI scrapers."

Challenges in Mitigation

The hosts highlight the difficulty small and medium-sized institutions face in combating these scrapers. Implementing technical solutions like CAPTCHAs or login walls contradicts the mission of making cultural heritage freely accessible.

Emmanuel Mayberg [34:09]: "Implementing protections like CAPTCHAs can make resources less accessible, counter to the mission of these organizations."

Current and Future Solutions

Jason discusses potential mitigation strategies, including leveraging services like Cloudflare to deploy firewall protections and actively monitoring for scraper activity to negotiate with offending companies.

Jason Kebler [38:44]: "Cloudflare offers tools to protect against scrapers, but it's a constant battle as new bots emerge."

The conversation underscores the ongoing arms race between cultural institutions striving to preserve accessibility and the relentless advancement of AI scraping technologies.

Conclusion

This episode of The 404 Media Podcast sheds light on two significant and interrelated issues of data privacy and accessibility in the digital age. The revelation that airlines have been covertly selling flight data to DHS raises critical questions about surveillance and individual privacy. Simultaneously, the surge of AI scraping bots disrupting cultural institutions highlights the challenges of maintaining open access in an era of advanced data collection technologies. The hosts emphasize the need for greater transparency, robust legal frameworks, and innovative technical solutions to navigate these complex landscapes.

Notable Quotes:

• Joseph [06:19]: "You are not allowed to reveal where this airline data came from... unless compelled by a valid court order."
• Jason Kebler [07:32]: "ARC sits in the middle of the transaction between travel agents and airlines, harvesting valuable data."
• Joseph [16:29]: "DHS is buying bulk access to billions of flight records without clear legal limitations."
• Emmanuel Mayberg [27:02]: "AI scrapers are flooding open resources with traffic, sometimes taking them offline."
• Jason Kebler [38:44]: "Cloudflare offers tools to protect against scrapers, but it's a constant battle as new bots emerge."

For those interested in supporting independent journalism and gaining access to additional exclusive content, consider subscribing to 404 Media at 404media.co.