Canadian ultra-low-cost carrier Flair Airlines left credentials to sensitive databases and email addresses open for at least seven months, increasing the risk of passengers’ personal information, such as emails, names, or addresses, ending up in the wrong hands.