[CLSTR]
API
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

5 clusters · 24 sources · 20 days · First seen · Last updated

Amadeus-related data breaches in Asia

Overview

A series of data breaches involving the Amadeus IT Group service provider has impacted multiple travel and aviation entities across Asia.

Initial reports indicated that an unauthorized access incident on the Amadeus booking platform affected the Legoland Japan Hotel, potentially compromising the contact information of approximately 1,557 customers. Following this, Japan Airlines (JAL) and Japan Transocean Air (JTA) announced that the breach may have exposed the booking information of roughly 92,000 customers. For approximately 2,000 of these individuals, data such as passport numbers and nationality may have been accessed.

Recent developments indicate the breach also affected All Nippon Airways (ANA), Korean Air, Asiana Airlines, Cathay Pacific, and Malaysia Airlines. Cathay Pacific reported that approximately 53,000 bookings were affected.

Singapore Airlines has now confirmed that approximately 46,000 booking records were potentially compromised. Exposed data includes customer names, booking reference numbers, and travel itineraries. For roughly 620 records, more sensitive information, such as travel document details and KrisFlyer membership numbers, may have been accessed. The airline stated its own IT systems were not breached and the incident was confined to the Amadeus platform. Amadeus has confirmed that bank account and credit card information was not leaked during this specific incident.

The incident is believed to have involved unauthorized access using compromised login credentials assigned to Amadeus system accounts. Amadeus has stated that necessary security measures, including resetting associated passwords and implementing enhanced monitoring, have since been implemented.

Entities

Japan Airlines · Amadeus IT Group · Cathay Pacific · All Nippon Airways · Asiana Airlines

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [TECHNOLOGY] 3 sources
    Amadeus IT Group data breach affects JAL and ANA customers

    A data breach at Amadeus IT Group has exposed the personal and reservation details of approximately 130,000 JAL and ANA customers.

  2. [TECHNOLOGY] 9 sources
    Singapore Airlines reports 46,000 booking records affected by Amadeus breach

    Singapore Airlines reported that 46,000 booking records were accessed via a breach at technology provider Amadeus, affecting names, itineraries, and some personal contact details.

  3. [TECHNOLOGY] 4 sources
    Amadeus data breach affects multiple Asian airlines

    A data breach at technology provider Amadeus has exposed passenger reservation details for several major Asian airlines, including Cathay Pacific, ANA, and Japan Airlines.

  4. [TECHNOLOGY] 8 sources
    Amadeus IT Group data breach affects JAL, ANA, and Korean airlines

    A data breach at Amadeus IT Group has exposed reservation information for customers of JAL, ANA, Korean Air, and Asiana Airlines.

  5. [TECHNOLOGY] 6 sources
    Data breaches reported for Legoland Japan Hotel and Hassha All Right Net

    Unauthorized access to reservation platforms has compromised customer data for Legoland Japan Hotel and the highway bus booking site Hassha All Right Net in Japan.

Sources

ascii.jp · astig.ph · aviationwire.jp · boardingarea.com · classics.itmedia.co.jp · cybersecurity-jp.com · devdiscourse.com · goodyfeed.com · hongkongbusiness.hk · ibtimes.co.uk · insurancejournal.com · iussp.org · japan.cnet.com · myjoyonline.com · newsbytesapp.com · rayhaber.com · srnnews.com · tabla.com.sg · tezzbuzz.com · traicy.com · travelandtourworld.com · travelvoice.jp · weekly.ascii.jp · zdnet.co.kr

This summary has been updated 5 times: see revision history