Excerpt from PhocusWire, Published on November 2, 2026
The Amadeus data breach has raised concerns about airline passenger information security after multiple airlines reported unauthorized access to customer reservation data stored in systems operated by travel technology provider Amadeus. The incident highlights the potential impact of security vulnerabilities in third-party technology systems used across the global airline industry. The incident also involved passenger booking information, with some cases also exposing additional personal details, including passport numbers and contact information.
The Amadeus data breach involved a vulnerability in the company’s travel booking display environment that made certain reservation information accessible to unauthorized parties. Several airlines have disclosed the impact on their customers. Japan Airlines reported that approximately 92,000 customers were affected, while All Nippon Airways (ANA) identified approximately 37,800 affected customers. Cathay Pacific also reported that around 53,000 bookings were affected.
In addition, Korean Air and Asiana Airlines reported unauthorised access to customer reservation information. Malaysia Airlines also stated that some customer information processed through Amadeus may have been affected. The exposed information varied across airlines and included passenger names, booking references, flight details, and, in some cases, passport numbers and contact information.
Amadeus acknowledged the vulnerability and confirmed that it had implemented measures to address the issue. The company also strengthened its monitoring and detection capabilities and began communicating with affected customers and relevant authorities.
However, Amadeus stated that its investigation had found no evidence of payment or financial information being accessed. The company also reported no indications that the vulnerability had been exploited for ransomware purposes.
For additional information, read the full report from PhocusWire.
