Are Airline PNRs data protected?

Hi! Was just wondering. Was confronted by an ex a few days ago who told me that I was on a flight with another girl. She explicitly told me that she saw PNRs proving she’s correct. Turns out that her boyfriend occupies a high position at the airline. Is this considered a breach? I am from an EU country.

airline breach data flight high privacy