Science & Tech · Cybersecurity · 2 hrs ago
Amadeus breach exposes booking data at several Asian airlines
A vulnerability at Amadeus exposed airline booking data in a breach affecting several Asian carriers.
Amadeus, a Spanish company that provides reservation and booking systems, supports some of Singapore Airlines’ booking processes.
Singapore Airlines says about 46,000 booking records were accessed, including names, booking references, travel itineraries and booking classes.
For about 620 records, contact details, travel document information or KrisFlyer membership numbers may also have been exposed.
The breach did not reach Singapore Airlines’ own systems, and the company says no bookings were changed; Amadeus said no payment or financial data was accessed.
Other affected airlines include Japan Airlines, Cathay Pacific, Malaysia Airlines and Asiana Airlines.
Singapore Airlines is contacting customers with upcoming trips to change their booking references and advises customers to watch for malicious emails.
A data breach involving Spanish travel technology provider Amadeus exposed booking information held for customers of several Asian airlines.
Singapore Airlines said about 46,000 booking records were accessed, including names, booking references, itineraries and booking classes.
For about 620 of those records, additional details such as contact information, travel documents and KrisFlyer membership numbers may also have been accessed.
Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines and Malaysia Airlines also reported breaches linked to Amadeus.
The airlines said their own systems and operations were not affected, and Amadeus said no payment or financial data was accessed.
- Who
- Customers of Singapore Airlines and several other Asian airlines; the breach involved Amadeus, a travel technology provider.
- What
- Unauthorised access exposed booking data held on Amadeus’ platform.
- When
- Singapore Airlines announced the breach on Nov 3, 2026. The incident date is not stated.
- Where
- Data held on Amadeus’ platform was accessed. The platform supports some Singapore Airlines reservation and booking processes.
- Why
- The cause of the unauthorised access is not stated. Amadeus said a vulnerability affected a travel booking display environment.
This story does not have two clearly opposing sides.
Singapore Airlines said about 46,000 booking records had been accessed and that it was contacting affected customers with upcoming travel.
The Record reported that several Asian airlines had disclosed breaches linked to Amadeus.
- Singapore Airlines records
- About 46,000 booking records accessed
- Additional details
- About 620 records may have included contact details, travel documents and KrisFlyer membership numbers
- Affected airlines named
- Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines
- Amadeus platform
- Supports some Singapore Airlines reservation and booking processes
- Data not accessed
- Amadeus said bank account and credit card information was not exposed
3 sources
What people are saying
Certain booking-display data was accessible through the vulnerability. Although our investigations continue, we can confirm that there is no evidence that payment or financial data was accessed.
There are no indications that this vulnerability has been exploited for ransomware purposes. Amadeus implemented measures to fix the vulnerability as well as enhanced monitoring and detection capabilities. We are in direct dialogue with our customers and authorities.
The protection of our customers’ personal data is of utmost importance to SIA