Technology1 min read

About 46,000 SIA booking records accessed in data breach involving travel tech company Amadeus

By · Published by Everything Blog

In short

The unauthorized intrusion targeted customer data housed within Amadeus, a travel technology provider that handles passenger reservations for several major carriers. While Singapore Airlines stated its internal systems remained intact, names and travel itineraries were exposed, with a smaller subset of travelers facing wider exposure of frequent flyer and contact details. In response, Amadeus deployed containment measures and enhanced safeguards, while the airline notified regulators and initiated updates to upcoming booking references.

Key points

  • Travelers with upcoming flights are being contacted by Singapore Airlines as a precaution…: Travelers with upcoming flights are being contacted by Singapore Airlines as a precaution to update their booking reference numbers.
  • The breach was isolated to the external vendor platform, leaving Singapore Airlines' own…: The breach was isolated to the external vendor platform, leaving Singapore Airlines' own internal IT infrastructure completely uncompromised.
  • Global travel networks remain vulnerable to vendor breaches, with carriers like Cathay Pa…: Global travel networks remain vulnerable to vendor breaches, with carriers like Cathay Pacific, Malaysia Airlines, Asiana, and Japan Airlines also affected.

Sources checked by our analysis pipeline: 1

Customers’ names, booking references and travel details were among the data exposed, but SIA said its own IT systems were not breached.

SINGAPORE: Data relating to about 46,000 Singapore Airlines (SIA) booking records was accessed in a data breach involving software provider Amadeus.

In a media statement on Tuesday (Nov 3), SIA said the data accessed included customers’ names, booking reference numbers, travel itineraries and booking classes.

For about 620 booking records, information including email addresses, phone numbers, travel document details and KrisFlyer membership numbers may also have been accessed, it said.

The incident involved unauthorised third-party access to customer data held on Amadeus’ platform, which supports some of SIA’s reservation and booking processes. SIA said its own IT systems were not breached.

Amadeus has implemented containment measures and additional security safeguards following the incident, SIA said.

Amadeus confirmed that the exposed data did not include bank account or credit card information and that no bookings were changed as a result of the unauthorised access.

As a precaution, SIA is contacting affected customers with upcoming travel to change their booking…

Technology