Travel Agent AI Chat-bot Breaches GDPR Without Prompt

I asked for MY flight details… and it gave me a German stranger’s name and their flight # from the same date, a crazy breach of information security and I didn’t even ask. I wasn’t all that sure who to raise this to so here I am guys.

Important note, the departing destinations, airports and carriers aren’t even a match. The only threads are the date and the arriving destination.

To me, this is deeply troubling. I’m not hugely anti AI but is this truly the same technology we are entrusting with our security and defence too, new targeting systems when it can’t distinguish which disgruntled passenger they’re talking to?

Has anyone else come across anything similar?

For any US Americans: UK/EU GDPR are our basic information/data consumer rights.