Technology1 min read

46,000 SIA booking records accessed illegally in data breach affecting software provider Amadeus

By · Published by Everything Blog

In short

An unauthorized third party gained access to Amadeus systems, compromising travel itineraries, names, and booking classes for thousands of Singapore Airlines travelers. For roughly 620 records, the exposure expanded to include KrisFlyer membership numbers, travel document details, email addresses, and phone numbers. Amadeus has since applied containment measures and security safeguards to protect its platform. The airline has reported the incident to authorities and is advising affected customers with future flights to update their reservation references.

Key points

  • Singapore Airlines confirmed that its internal IT infrastructure was not compromised duri…: Singapore Airlines confirmed that its internal IT infrastructure was not compromised during the Amadeus security incident.
  • No financial data, bank account numbers, or credit card details were accessed during the…: No financial data, bank account numbers, or credit card details were accessed during the unauthorized platform breach.
  • Several regional carriers including Malaysia Airlines, Cathay Pacific, Japan Airlines, an…: Several regional carriers including Malaysia Airlines, Cathay Pacific, Japan Airlines, and Asiana Airlines were also impacted by the vendor breach.

Sources checked by our analysis pipeline: 1

SINGAPORE – About 46,000 Singapore Airlines (SIA) booking records were affected by a data breach at the carrier’s reservation-technology provider, Amadeus.

In a media reply on Nov 3, an SIA spokesperson said that data illegally accessed by a third party included customers’ names, booking reference numbers, travel itineraries and booking classes.

For about 620 booking records, information including e-mail addresses, phone numbers, travel document details, and KrisFlyer membership numbers may have been accessed, the spokesperson added.

However, Amadeus has confirmed that bank account or credit card information has not been exposed, and no booking has been modified, SIA said.

The incident was confined to Amadeus’ platform, and the global travel technology provider, which supports certain SIA reservations and booking processes, has told SIA that containment measures and additional security safeguards have been implemented following the breach, the airline said.

SIA said the incident did not involve a breach of its IT systems.

As a precaution, SIA said, it is directly contacting affected customers with upcoming travel to change their booking reference numbers.

SIA said it has also informed the relevant…

Technology