Vaguely related: the security of airline passenger data is atrocious. https://media.ccc.de/v/33c3-7964-where_in_the_world_is_carme...
If I got an email from someone who looks like the airline I just booked with with all my info (email, name, date, departure, arrival airports, etc) that said I need to update my credit card, I would.