Police in east China's Wenzhou City, Zhejiang Province have seized 20 people suspected of stealing more than 300,000 pieces of personal information.
The gang were found to have hacked into servers of over 50 airline company websites since 2016. The leaks included user IDs, passwords and flight information.
The suspects were found to have sold the information for 5 yuan (about 80 U.S. cents) per piece and they have made over 10 million yuan, police said.
According to Chinese laws, those who illegally obtain or sell 500 or more pieces of personal information could face a sentence of up to seven years.