Amadeus IT Group data breach affects JAL and ANA customers

A major data breach involving the Spanish IT firm Amadeus IT Group S.A. has resulted in the leak of customer reservation information for Japan Airlines (JAL) and All Nippon Airways (ANA). The breach affected approximately 130,000 passengers in total.

JAL reported that about 92,000 individuals were affected, with 90,000 losing basic details like names and booking numbers, while 2,000 others had more sensitive data exposed, including passport numbers and contact information. ANA reported approximately 37,800 affected customers, with 1,700 of those losing detailed personal information such as passport and mileage numbers.

The breach was not a direct attack on the airlines' internal databases but rather an unauthorized use of credentials within the Amadeus system, which manages reservation and ticketing services for over 400 airlines globally. Both airlines have stated that credit card numbers and passwords were not compromised, and there have been no reports of the stolen data being used for fraudulent purposes or any disruption to flight operations.