# Amadeus-related data breaches in Asia > Developing situation record from CLSTR: https://clstr.news/situations/amadeus-related-data-breaches-in-japan > Updated: 2026-11-03T22:47:12.000Z. Sources: 24. Developments: 5. A series of data breaches involving the Amadeus IT Group service provider has impacted multiple travel and aviation entities across Asia. Initial reports indicated that an unauthorized access incident on the Amadeus booking platform affected the Legoland Japan Hotel, potentially compromising the contact information of approximately 1,557 customers. Following this, Japan Airlines (JAL) and Japan Transocean Air (JTA) announced that the breach may have exposed the booking information of roughly 92,000 customers. For approximately 2,000 of these individuals, data such as passport numbers and nationality may have been accessed. Recent developments indicate the breach also affected All Nippon Airways (ANA), Korean Air, Asiana Airlines, Cathay Pacific, and Malaysia Airlines. Cathay Pacific reported that approximately 53,000 bookings were affected. Singapore Airlines has now confirmed that approximately 46,000 booking records were potentially compromised. Exposed data includes customer names, booking reference numbers, and travel itineraries. For roughly 620 records, more sensitive information, such as travel document details and KrisFlyer membership numbers, may have been accessed. The airline stated its own IT systems were not breached and the incident was confined to the Amadeus platform. Amadeus has confirmed that bank account and credit card information was not leaked during this specific incident. The incident is believed to have involved unauthorized access using compromised login credentials assigned to Amadeus system accounts. Amadeus has stated that necessary security measures, including resetting associated passwords and implementing enhanced monitoring, have since been implemented. ## Claims - Amadeus IT Group experienced unauthorized access to its passenger service system. (reported by 8 sources) - Approximately 92,000 JAL and JTA customers had reservation information accessed. (reported by 6 sources) - About 2,000 JAL and JTA customers may have had passport numbers and email addresses exposed. (reported by 5 sources) - Korean Air and Asiana Airlines reported reservation number leaks due to the Amadeus breach. (reported by 5 sources) - ANA confirmed customer reservation information was accessed via Amadeus. (reported by 4 sources) - Credit card numbers and passwords were not leaked in the JAL/JTA incident. (reported by 4 sources) - The unauthorized access period for JAL/JTA records was from August 10, 2023, to September 23, 2026. (reported by 4 sources) - Amadeus has completed necessary security measures to address the breach. (reported by 3 sources) ## Timeline ### 2026-11-03: Amadeus IT Group data breach affects JAL and ANA customers A data breach at Amadeus IT Group has exposed the personal and reservation details of approximately 130,000 JAL and ANA customers. 3 sources. https://clstr.news/cluster/amadeus-it-group-data-breach-affects-jal-and-ana-customers ### 2026-11-03: Singapore Airlines reports 46,000 booking records affected by Amadeus breach Singapore Airlines reported that 46,000 booking records were accessed via a breach at technology provider Amadeus, affecting names, itineraries, and some personal contact details. 9 sources. https://clstr.news/cluster/singapore-airlines-reports-46000-booking-records-affected-by-amadeus-breach ### 2026-11-01: Amadeus data breach affects multiple Asian airlines A data breach at technology provider Amadeus has exposed passenger reservation details for several major Asian airlines, including Cathay Pacific, ANA, and Japan Airlines. 4 sources. https://clstr.news/cluster/amadeus-data-breach-affects-multiple-asian-airlines ### 2026-10-28: Amadeus IT Group data breach affects JAL, ANA, and Korean airlines A data breach at Amadeus IT Group has exposed reservation information for customers of JAL, ANA, Korean Air, and Asiana Airlines. 8 sources. https://clstr.news/cluster/japan-airlines-customer-data-potentially-accessed-via-amadeus-breach ### 2026-10-14: Data breaches reported for Legoland Japan Hotel and Hassha All Right Net Unauthorized access to reservation platforms has compromised customer data for Legoland Japan Hotel and the highway bus booking site Hassha All Right Net in Japan. 6 sources. https://clstr.news/cluster/legoland-japan-hotel-booking-platform-suffers-unauthorized-access --- Cite as: Amadeus-related data breaches in Asia. CLSTR, https://clstr.news/situations/amadeus-related-data-breaches-in-japan