AMADEUS CYBERSECURITY BREACH EXPANDS ACROSS ASIAN AIRLINES AS ADDITIONAL CARRIERS CONFIRM EXPOSURE OF PASSENGER RESERVATION DATA

MADRID, SPAIN — A cybersecurity breach involving Spanish travel technology provider Amadeus IT Group has expanded into a wider aviation industry security incident, with additional airlines across Asia confirming unauthorized access to passenger reservation information. Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, and Singapore Airlines have reported exposure of customer reservation information associated with Amadeus systems, while Malaysia Airlines has warned that its customers’ information may also have been affected. The disclosures raise concerns about the security of shared reservation infrastructure used by multiple international carriers.

The latest disclosures follow the October 28, 2026, announcement by Japan Airlines that approximately 92,000 customers of Japan Airlines and Japan Transocean Air were affected by unauthorized access to Amadeus’s Passenger Service System. The Realist Juggernaut previously reported that incident, including the exposure of reservation information and additional personal details associated with a smaller group of passengers. New disclosures indicate that the security failure extended beyond the Japanese carriers, affecting other airlines that rely on the same technology provider.

Cathay Pacific confirmed on October 30 that approximately 53,000 booking records were affected by unauthorized access to reservation information maintained within Amadeus systems. The Hong Kong-based airline stated that Amadeus notified it of the incident on October 28 and provided additional details the following day. According to Cathay Pacific’s official disclosure, an unauthorized party accessed travel reservation records using login credentials assigned to a system account within Amadeus’s environment. According to Cathay Pacific, the unauthorized access occurred between August 2023 and September 2026.

Most of the affected Cathay Pacific records contained passenger names, booking reference numbers, and flight details. A smaller portion potentially exposed email addresses, telephone numbers, travel document information, and frequent flyer identification numbers. The airline reported no evidence that payment or financial information was accessed and confirmed that its own internal systems and flight operations remained unaffected. Cathay Pacific also notified relevant authorities and began reviewing the information supplied by Amadeus to identify customers requiring individual notification.

Singapore Airlines separately confirmed that approximately 46,000 booking records were affected by the same third-party security incident. Exposed information included passenger names, reservation confirmation numbers, travel itineraries, and booking classes. Approximately 620 records may also have contained email addresses, telephone numbers, travel document details, and KrisFlyer membership numbers. The airline stated that its own information technology systems were not compromised and that Amadeus had confirmed no exposure of bank account or credit card information. No unauthorized modifications to passenger bookings were identified.

As a precaution, Singapore Airlines began contacting affected passengers with upcoming travel arrangements to replace exposed booking reference numbers. The measure is intended to reduce the possibility that compromised reservation information could be used to interfere with existing travel arrangements. The airline also warned customers to remain cautious of suspicious communications that could exploit knowledge of their personal information or flight details.

Malaysia Airlines also disclosed its involvement in the incident through an official cybersecurity notice published in late October 2026. The carrier stated that customer information processed through Amadeus between August 2023 and September 2026 may have been affected. Although the airline did not provide a confirmed number of affected passengers, it stated that its own systems had not been compromised and that investigators had found no evidence of unauthorized access to financial information. Malaysia Airlines is working with Amadeus and other relevant parties to determine the extent of the exposure.

South Korea’s Korean Air and Asiana Airlines have also acknowledged unauthorized access to customer reservation information associated with Amadeus. Both carriers were reportedly notified of the incident on October 20, 2026, before the wider series of public disclosures emerged. The available announcements did not establish the total number of passengers affected at either airline, leaving the full scope of the incident unresolved.

Amadeus confirmed that it discovered a vulnerability affecting a travel booking display environment, allowing certain reservation information to become accessible without authorization. The company reported that it implemented corrective measures and strengthened its monitoring and detection capabilities. Amadeus also stated that investigators had found no evidence of access to payment or financial information and no indication that the vulnerability had been exploited for ransomware purposes. Its investigation remains ongoing, with the company communicating directly with affected airlines and relevant authorities.

The reported use of system-account credentials in the Cathay Pacific incident introduces an important security concern involving authentication controls within shared airline technology environments. Reservation systems process substantial volumes of personal information on behalf of multiple carriers, and unauthorized access through a service provider can expose records belonging to organizations whose own networks remain secure. The investigation has not publicly established the complete technical intrusion method, the identity of the attackers, or whether the same access credentials were involved in every affected airline’s exposure.

The number of affected individuals remains uncertain. Japan Airlines disclosed approximately 92,000 affected customers, while Cathay Pacific identified 53,000 booking records and Singapore Airlines reported another 46,000. These figures represent different reporting measurements, with some airlines counting individual customers and others counting reservation records. They cannot be combined to establish an exact total of unique passengers affected across the aviation industry. Other carriers have not disclosed complete figures, and Amadeus has not provided an aggregate victim count.

Although the participating airlines have reported no disruption to their own operational systems, the exposed reservation information creates potential security concerns for passengers. Booking references, travel schedules, contact information, and travel document identifiers can be exploited in targeted phishing attempts, fraudulent customer service communications, and other forms of identity-related deception. The exposure of itinerary information may also allow criminals to construct convincing messages that reference genuine flight arrangements, increasing the likelihood that recipients will mistake fraudulent communications for legitimate airline notifications.

The incident also highlights the concentration of sensitive passenger information within major aviation technology providers. Amadeus supplies reservation, ticketing, and related operational technology to hundreds of airlines and airports, making the security of its shared platforms important to the broader transportation industry. A compromise affecting a central service provider can create consequences across multiple carriers without requiring attackers to penetrate each airline’s internal infrastructure independently.

The expanding disclosures establish that the Amadeus incident is no longer limited to the Japan Airlines exposure previously reported by The Realist Juggernaut. Additional airlines are now assessing affected records, notifying authorities, and implementing protective measures for passengers whose information may have been accessed. The remaining questions concern the full number of exposed records, the duration and method of unauthorized access, and whether investigators can establish any misuse of the affected information. Until those findings are available, the confirmed security exposure warrants continued attention from airlines, technology providers, and passengers whose travel information was processed through the affected systems.

---

Personal Data Security Incident Involving a Third-Party Service Provider, October 30, 2026. Official airline disclosure confirming unauthorized access to approximately 53,000 booking records through Amadeus systems. (Free Download)

---

---

---

Cybersecurity Incident Involving Third-Party Technology Provider, October 30, 2026. Official airline security notice concerning the Amadeus incident, potentially affected customer information, and ongoing investigation. (Free Download)

---

---

---

Notice of Leakage of Some Customer Personal Information (Reservation Numbers), October 2026. Official airline notification confirming unauthorized access to reservation information through Amadeus, including the disclosure timeline and customer protection measures. (Free Download)

---

---

---

About 46,000 SIA Booking Records Accessed in Data Breach Involving Travel Tech Company Amadeus, by Renee Kuek, November 3, 2026. Reporting based on Singapore Airlines’ official media statement confirming exposed reservation records and affected customer information. (Free Download)

---

---

---

Amadeus Statement, October 2026. Official company statement acknowledging a vulnerability affecting its travel booking display environment, confirming corrective measures, and addressing the investigation into unauthorized data access. (Free Download)

---

---

---

---

JAPAN AIRLINES SAYS AMADEUS BREACH EXPOSED DATA OF APPROXIMATELY 92,000 CUSTOMERS

---

---

---

---

---

---

---

---

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

---

---

---

---

---