Several major Asian airlines are investigating customer data breaches after a cyberattack exposed information stored through a shared travel technology provider. The incident has affected passengers across multiple airlines, raising fresh concerns about the security of third-party booking platforms.
Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have reported breaches linked to Amadeus IT Group over the past week.
The Spanish technology company develops and maintains systems used for flight reservations, ticketing and passenger check-ins. Consequently, the incident has raised concerns about how a security weakness at one provider can affect customers across multiple airlines.
Amadeus Confirms Vulnerability in Booking Display System
Amadeus acknowledged that it recently discovered a vulnerability affecting a travel booking display environment. The weakness reportedly allowed unauthorised access to certain booking-related information.
A company spokesperson said investigations were continuing but confirmed that there was no evidence of financial information being accessed.
“Certain booking-display data was accessible through the vulnerability. Although our investigations continue, we can confirm that there is no evidence that payment or financial data was accessed,” the spokesperson said.
The company also addressed concerns about possible ransomware activity.
“There are no indications that this vulnerability has been exploited for ransomware purposes. Amadeus implemented measures to fix the vulnerability as well as enhanced monitoring and detection capabilities. We are in direct dialogue with our customers and authorities.”
However, Amadeus has not disclosed whether the attackers contacted the company. It has also declined to reveal the total number of affected customers.
Thousands of Airline Customers Have Their Information Exposed
Several airlines have confirmed that customer records were accessed during the incident. Japan Airlines reported that information belonging to approximately 92,000 customers was stolen.
Singapore Airlines disclosed that around 46,000 records were accessed. Meanwhile, Cathay Pacific confirmed that hackers stole information from approximately 53,000 customer records.
The exposed information included passenger names, booking numbers and flight details. Some records also contained passport information, other travel documents, frequent flyer numbers and email addresses.
Singapore Airlines confirmed that the compromised information included booking confirmation numbers, passenger names and travel itineraries.
The airlines have also shared details about how the attackers accessed the booking environment. According to information provided by Amadeus, threat actors used login credentials assigned to its system account.
However, the company has not provided further details about the incident or explained how those credentials were obtained.
Singapore Airlines Warns Passengers About Exposed Booking Details
Singapore Airlines has taken additional steps to protect passengers whose booking information may have been exposed.
The airline said it would contact customers with upcoming flights and help them change their affected booking numbers. This measure aims to reduce the risk of criminals misusing exposed reservation details.
Furthermore, the airline urged passengers to remain alert to suspicious emails and other potentially malicious messages.
Exposed booking information can create opportunities for targeted scams. Therefore, affected customers should carefully check unexpected messages claiming to come from airlines.
Importantly, the airlines have clarified that the incident did not compromise their own systems or disrupt their operations. Instead, the reported breaches were linked to the security incident involving Amadeus.
Why the Amadeus Breach Raises Wider Industry Concerns
Amadeus reported more than $6.5 billion in revenue last year. The company also maintains technology agreements with hundreds of airlines and airports worldwide.
Its platforms support important travel operations, including ticketing, reservations and passenger check-ins. Therefore, a vulnerability affecting its systems can have consequences across multiple customer organisations.
The latest incident demonstrates the risks associated with shared technology providers. Even when an airline’s own systems remain secure, information stored or processed through an external platform may still become exposed.
However, the full scale of the breach remains unclear. Amadeus has not confirmed the total number of affected customers or provided further details about the attackers.
Airlines Continue to Face Cybersecurity Threats
The aviation industry has experienced several significant cyber incidents over the past year. In 2026, Spanish airline Iberia and Air Côte d’Ivoire also faced cyberattacks.
Meanwhile, Australian airline Qantas suffered a major data breach last year. Hackers stole approximately six million customer records during that incident.
The breach eventually resulted in senior Qantas executives receiving fines worth hundreds of thousands of dollars.
As more airlines rely on interconnected technology platforms, cybersecurity risks extend beyond individual carriers. The latest Amadeus incident highlights how a single vulnerability can expose sensitive passenger information across several airlines.
For affected passengers, the immediate concern is the misuse of exposed booking and travel details. Meanwhile, the wider industry faces renewed pressure to strengthen security across third-party systems.
For the latest updates, visit and follow The Truth International website (www.thetruthinternational.com) and subscribe to the YouTube Channel.
