Amadeus IT Group data breach affects JAL, ANA, and Korean airlines

Amadeus IT Group data breach passenger service system Japan Airlines All Nippon Airways

A security breach at Amadeus IT Group, a global provider of passenger service systems, has resulted in the unauthorized access of customer reservation data for several major airlines.

Japan Airlines (JAL) and Japan Transocean Air (JTA) reported that approximately 92,000 customers had their reservation details accessed between August 2023 and September 2026. For about 2,000 of these individuals, more sensitive information including passport numbers, email addresses, phone numbers, and nationality may have been exposed.

All Nippon Airways (ANA) also confirmed that customer reservation information was accessed via the Amadeus system, though the specific number of affected users and the exact data categories are still under investigation.

In South Korea, Korean Air and Asiana Airlines previously announced that reservation numbers were among the data points accessed due to the same system breach.

None of the affected airlines reported that credit card numbers or passwords were compromised, and no direct breaches of the airlines' own internal systems were detected. Amadeus has reportedly implemented necessary security measures to address the vulnerability.

Entities

All Nippon Airways · Amadeus · Amadeus IT Group · Asiana Airlines · Japan Airlines · Japan Transocean Air · Korean Air

Claims

What the coverage asserts, and how many sources carry each claim.

[● 5 SOURCES] Korean Air and Asiana Airlines reported reservation number leaks due to the Amadeus breach. cybersecurity-jp.com · www.travelvoice.jp · www.aviationwire.jp · zdnet.co.kr
[● 4 SOURCES] The unauthorized access period for JAL/JTA records was from August 10, 2023, to September 23, 2026. cybersecurity-jp.com · www.travelvoice.jp · www.watch.impress.co.jp · zdnet.co.kr
[● 4 SOURCES] Credit card numbers and passwords were not leaked in the JAL/JTA incident. cybersecurity-jp.com · www.travelvoice.jp · www.watch.impress.co.jp · zdnet.co.kr
[● 4 SOURCES] ANA confirmed customer reservation information was accessed via Amadeus. www.itmedia.co.jp · www.aviationwire.jp · japan.cnet.com
[● 3 SOURCES] Amadeus has completed necessary security measures to address the breach. cybersecurity-jp.com · www.travelvoice.jp · www.watch.impress.co.jp
[● 8 SOURCES] Amadeus IT Group experienced unauthorized access to its passenger service system. cybersecurity-jp.com · www.travelvoice.jp · www.itmedia.co.jp · www.watch.impress.co.jp · www.aviationwire.jp · +2 more
[● 5 SOURCES] About 2,000 JAL and JTA customers may have had passport numbers and email addresses exposed. cybersecurity-jp.com · www.travelvoice.jp · www.watch.impress.co.jp · japan.cnet.com · zdnet.co.kr
[● 6 SOURCES] Approximately 92,000 JAL and JTA customers had reservation information accessed. cybersecurity-jp.com · www.travelvoice.jp · www.watch.impress.co.jp · www.aviationwire.jp · japan.cnet.com · +1 more