Actually unlike BA, QF does NOT mask the passport information (ENTER APIS) tab in the "manage booking" - therefore this is actually a far bigger problem which is on par with the Optus beach...with all this data (mobile/emails/DOB etc) this is a data goldmine for someone with malicious...