Amadeus breach may have exposed Malaysia Airlines customer data
SpilloverSpillover from the Amadeus incident · View original incident →An unauthorised access incident at reservation system supplier Amadeus raised the possibility that some Malaysia Airlines customer data was exposed. The data concerned was processed between August 2023 and September 2026, and the number of victims and the specific data items have not been disclosed. Malaysia Airlines notified customers of the incident and said there was no evidence of a breach of its own IT systems or access to financial information.
Key facts
- Affected organisation
- Malaysia Airlines
- Original incident
- Amadeus reservation system breach exposes passenger data at multiple airlines
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Unauthorised access to reservation system supplier Amadeus
- Location
- Malaysia
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Malaysia Airlines said customer data processed between August 2023 and September 2026 may have been affected by the Amadeus security incident.
- It was confirmed that Malaysia Airlines' own IT systems were not breached and that the number of victims and data items had not been disclosed.
Original incident
This is spillover from the Amadeus incident.
Amadeus reservation system breach exposes passenger data at multiple airlines
Impact: Passenger booking data exposed at multiple airlines
Unauthorised access to the reservation system of Spanish travel technology company Amadeus exposed passenger booking data at multiple airlines. Alongside names and itinerary details, some passport numbers and contact details were exposed, with Japan Airlines, ANA and Cathay Pacific among the affected airlines. Further reports followed from Korean Air, Asiana Airlines and others, while Thailand's aviation authorities confirmed that Thai Airways and Bangkok Airways were affected among seven major airlines.
Related reports: 9 · last report →
8 related reports
- Malaysia Airlines is the ninth carrier named in the Amadeus breach, and the 184,000 total now circulating adds bookings to people
- Malaysia Airlines says customers may be affected by Amadeus breach
- Malaysia Airlines Flags Amadeus Breach: 3 Years [2026]
- Malaysia Airlines hit by major Amadeus cybersecurity breach
- Malaysia Airlines warns customers after Amadeus data breach
- Malaysia Airlines Warns Customers of Amadeus Data Breach
- Amadeus Cyberattack Spreads to Malaysia Airlines, Customer Data May Be Exposed
- News - Malaysia Airlines hit by data breach after reservation provider cyber attack
Other incidents at Malaysia Airlines
Qilin ransomware group claims breach of Malaysia Airlines
The ransomware group Qilin claimed to have breached Malaysia Airlines. The details of the breach and the scale of the damage have not been disclosed.
Related reports: 2 →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.