Norwegian cruise line had a similar thing recently with emails going out with actual booking information. Basically identical to the frontier scam emails. I wonder if there’s some customer service software that’s being exploited that they both use.
Edit: some info from the NcL one with screenshots that look similar https://www.reddit.com/r/NCL/comments/1x2q54e/warning_possib...
There was a post the other day that Amadeus (one of the major backend GDS systems) had been persistently exposing passenger information via a vulnerable endpoint since 2023
So that or similar other hacks