[CLSTR]
API
< Back to situation

[REVISION HISTORY]

Amadeus-related data breaches in Asia

5 recorded revisions of this situation.

What changed

2026-11-03 23:40 UTC → 2026-11-04 02:52 UTC · added removed

Amadeus-related data breaches in Japan, South Korea, and SE- Asia

A series of data breaches involving the Amadeus IT Group service provider has impacted multiple travel and aviation entities across Asia. Initial reports indicated that an unauthorized access incident on the Amadeus booking platform affected the Legoland Japan Hotel, potentially compromising the contact information of approximately 1,557 customers. Following this, Japan Airlines (JAL) and Japan Transocean Air (JTA) announced that the breach at Amadeus may have exposed the booking information of roughly 92,000 customers. For the majority approximately 2,000 of these individuals, data such as names, booking numbers, passport numbers and flight dates were potentially accessed. For approximately 2,000 customers, the exposure nationality may have included more sensitive details, including passport numbers, nationality, and contact information. JAL stated there is currently no evidence that the information has been misused. accessed. Recent developments indicate the breach also affected All Nippon Airways (ANA), which is investigating potential unauthorized access to its reservation information via the Amadeus system. In South Korea, Korean Air and Air, Asiana Airlines disclosed that their customers' reservation numbers were also exposed. Newer reports confirm the scope has expanded to include Airlines, Cathay Pacific, which and Malaysia Airlines. Cathay Pacific reported that approximately 53,000 bookings were affected. Accessed information for Cathay Pacific passengers included names, Singapore Airlines has now confirmed that approximately 46,000 booking references, and flight details, with some records were potentially including email addresses, telephone compromised. Exposed data includes customer names, booking reference numbers, or frequent-flyer numbers. Malaysia Airlines has also and travel itineraries. For roughly 620 records, more sensitive information, such as travel document details and KrisFlyer membership numbers, may have been linked accessed. The airline stated its own IT systems were not breached and the incident was confined to the investigation. Amadeus platform. Amadeus has confirmed that bank account and credit card information was not leaked during this specific incident. The incident is believed to have involved unauthorized access using compromised login credentials assigned to Amadeus system accounts. Amadeus has stated that necessary security measures, including resetting associated passwords and implementing enhanced monitoring, have since been implemented. JAL confirmed that credit card numbers and passwords were not leaked during the incident.

Versions

  1. 2026-11-04 02:52 UTC Amadeus-related data breaches in Asia
  2. 2026-11-03 23:40 UTC Amadeus-related data breaches in Japan, South Korea, and SE-
  3. 2026-11-01 23:02 UTC Amadeus-related data breaches in Japan, South Korea, and SE-
  4. 2026-10-30 07:40 UTC Amadeus-related data breaches in Japan and South Korea
  5. 2026-10-29 07:18 UTC Amadeus-related data breaches in Japan and South Korea
  6. 2026-10-28 12:12 UTC Amadeus-related data breaches in Japan

Select a version to see what changed compared to the one before it.