Aviation industry customer data breaches

Recent reports indicate that multiple airlines have experienced customer data breaches linked to external service providers.

Aeroméxico is investigating a potential leak of personal and financial information, including passport details and frequent flyer numbers. The company noted that the incident appears connected to a hack of a platform managed by an external provider that occurred in 2025. While the airline’s internal core systems were not directly affected, an evaluation is underway to strengthen security controls.

Similarly, Korean Air and Asiana Airlines confirmed that customer information was leaked through a security breach at Amadeus IT Group, a global reservation and ticketing software provider. The breach involved unauthorized access via compromised credentials, estimated to have occurred between August 2023 and September 2024. While reservation data was compromised, Asiana Airlines stated that payment-related data remained unaffected due to separate processing systems. Both airlines have requested enhanced protection plans from the provider.