Amadeus reservation system breach exposes passenger data at multiple airlines
Unauthorized access to the reservation system of Spanish travel technology company Amadeus exposed passenger booking data at multiple airlines. In addition to names and itinerary details, some passport numbers and contact details were exposed, with Japan Airlines, ANA and Cathay Pacific among the affected airlines. Further reports followed from Korean Air, Asiana Airlines and others, while Thailand's aviation authorities confirmed that Thai Airways and Bangkok Airways were affected among seven major airlines.
Key facts
- Affected organization
- Amadeus
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Passenger booking data exposed at multiple airlines
- Cause / method
- Unauthorized access to an airline reservation system
- Location
- Spain
If your data was exposed
Exposed dataNameUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- A cyberattack on Amadeus was reported to have put passenger data at four airlines at risk.
- Data affecting approximately 92,000 Japan Airlines passengers, approximately 37,800 ANA passengers and approximately 53,000 Cathay Pacific bookings was reported compromised.
- Data breaches linked to Amadeus were also reported at Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines, among others.
- Thailand's aviation authorities confirmed that Thai Airways and Bangkok Airways were affected among seven major airlines, and Thai Airways reported approximately 60,529 affected bookings.
Also affected by this incident
Amadeus breach exposes 106,661 Korean Air customer booking records
↳ Knock-on damage from the Amadeus incident · View original incidentImpact: 106,661 customer booking records (PNRs)
Unauthorized access using account login credentials at Amadeus, Korean Air’s reservation and ticketing systems partner, exposed 106,661 customer booking records. Amadeus blocked further access by the account on September 23 but notified Korean Air 27 days later, on October 20. The customer data breach and an investigation into its scope became public on October 23, and follow-up reporting in November confirmed the precise number of exposed records and the notification delay.
Related reports: 21 · last report →Amadeus breach exposes about 53,000 Cathay Pacific bookings
↳ Knock-on damage from the Amadeus incident · View original incident53KImpact: Data on about 53,000 bookings
Unauthorized access using credentials for an Amadeus system account exposed data on about 53,000 Cathay Pacific bookings. The exposed data was mainly passenger names, booking numbers and flight details, and some records may also have included contact details, travel document information and frequent flyer membership numbers. Cathay Pacific disclosed the harm to the booking data.
Related reports: 10 · last report →Japan Airlines vendor hack leaks data on about 92,000 customers
↳ Knock-on damage from the Amadeus incident · View original incident92KImpact: Information on about 92,000 customers
Unauthorized access to a passenger service system operated by Japan Airlines’ vendor Amadeus led to the leak of information on about 92,000 Japan Airlines customers. Evidence was found that some reservation information had been viewed externally, and Japan Airlines announced the customer data leak.
Related reports: 4 · last report →Amadeus Breach May Have Exposed ANA Customer Booking Data
↳ Knock-on damage from the Amadeus incident · View original incident37.8KImpact: Booking data of about 37,800 customers affected
The Amadeus breach was confirmed to have affected booking data of about 37,800 All Nippon Airways customers. Traces of access to names, booking numbers and itineraries were found for about 36,100 people, and passport numbers, contact details and other data may have been exposed for about 1,700.
Read on TRAICY Global ↗Amadeus breach may have exposed Malaysia Airlines customer data
↳ Knock-on damage from the Amadeus incident · View original incidentAn unauthorized access incident at reservation system supplier Amadeus raised the possibility that some Malaysia Airlines customer data was exposed. The data concerned was processed between August 2023 and September 2026, and the number of victims and the specific data items have not been disclosed. Malaysia Airlines notified customers of the incident and said there was no evidence of a breach of its own IT systems or access to financial information.
Related reports: 8 · last report →Qantas investigates booking data impact from Amadeus breach
↳ Knock-on damage from the Amadeus incident · View original incidentQantas investigated whether its booking data had been affected after unauthorized access to travel technology company Amadeus' systems. Qantas notified Australian authorities, and it remained unconfirmed whether passenger records had actually been accessed.
Related reports: 8 · last report →About 46,000 Singapore Airlines booking records accessed without authorization
↳ Knock-on damage from the Amadeus incident · View original incident46KImpact: Approximately 46,000 booking records
A breach of booking technology provider Amadeus's platform resulted in unauthorized access to approximately 46,000 Singapore Airlines booking records. Passenger names, booking references and itineraries were exposed, and contact details, travel document information and frequent flyer membership numbers may also have been accessed in approximately 620 records. Singapore Airlines' own systems were not directly breached.
Related reports: 12 · last report →Signs of customer flight booking number leak found at NH NongHyup Travel
↳ Knock-on damage from the Amadeus incident · View original incidentEvidence indicated that some NH NongHyup Travel customers' flight booking numbers were leaked through unauthorized access to the Amadeus system using authentication credentials. The incident is estimated to have occurred between August 2023 and September 2026. NH NongHyup Travel posted a notice on November 4, 2026, and is investigating which customers' data was actually leaked, what additional data was exposed, and the extent of the impact.
Related reports: 3 · last report →Amadeus breach exposes around 116,000 Finnair bookings
↳ Knock-on damage from the Amadeus incident · View original incident116KImpact: Around 116,000 bookings within the scope of exposure; around 750 actually viewed
An unauthorized access incident at reservation system provider Amadeus placed around 116,000 Finnair bookings within the scope of exposure, with around 750 confirmed to have actually been viewed. Finnair changed the booking reference numbers for affected active reservations. Card numbers and passwords were not accessed, and Finnair's own systems were not compromised.
Related reports: 10 · last report →Amadeus breach exposes about 60,529 Thai Airways booking records
↳ Knock-on damage from the Amadeus incident · View original incident60.5KImpact: About 60,529 passenger booking records affected, with approximately 376 potentially containing additional personal information
Account credentials belonging to reservation system provider Amadeus were misused to gain unauthorized access to about 60,529 Thai Airways passenger booking records. Names, booking references, and travel itineraries were exposed, and approximately 376 records may have contained additional personal information, including passport numbers and contact details. Thai Airways blocked access and reset passwords, while Thailand's personal data protection authority launched an investigation. Credit card information was unaffected.
Related reports: 17 · last report →Earlier Amadeus breach exposed data of 144,249 Norwegian and Widerøe passengers
↳ Knock-on damage from the Amadeus incident · View original incident144.2KImpact: Information belonging to 144,249 passengers
Data belonging to 144,249 Norwegian and Widerøe passengers was confirmed to have been exposed in a breach at external reservation technology provider Amadeus. Evidence of unauthorized access to Amadeus systems was found spanning August 2023 to September 2026, and the vulnerability was closed on September 23, 2026. Norwegian notified the supervisory authority and is assessing whether affected passengers need to be notified individually. The specific types of information exposed about the two airlines’ passengers have not been confirmed.
Read on DataBreaches.net ↗
9 related reports
- Amadeus cyberattack puts passenger data at risk at four airlines
- Amadeus cyberattack puts Asian airlines on alert
- Did Hackers Access Your Flight Details? Major Airlines Report Amadeus Breach
- Amadeus Data Breach: 38 Months of Airline Data [2026]
- Amadeus data breach affects multiple airline partners
- More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus
- More on Freezer Hacks, Binance, and Amadeus Breach; Node-RED Max-Severity Flaw Exploited; Update to Fix Linux Kernel TCP Flaw
- 全球航空订票巨头遭数据泄露，澳航、国泰等乘客谨防诈骗
- Amadeus data breach spreads as airlines reveal passenger exposure
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.