Technology1 min read

Malaysia Airlines says customers may be affected by Amadeus breach

By · Published by Everything Blog

In short

Malaysia Airlines is currently coordinating with Amadeus and relevant authorities to investigate the breach, which may have exposed customer records processed from August 2023 to September 2026. The vendor confirmed a flaw in its booking display environment but has yet to reveal the full scope of affected individuals. Meanwhile, other carriers utilizing Amadeus have acknowledged significant fallout, with Japan Airlines confirming 92,000 affected customers and Cathay Pacific reporting impacts on 53,000 bookings.

Key points

  • Passengers are being urged to remain vigilant against suspicious communications seeking p…: Passengers are being urged to remain vigilant against suspicious communications seeking personal or financial credentials.
  • The carrier confirmed its internal IT systems were not breached and financial data was no…: The carrier confirmed its internal IT systems were not breached and financial data was not accessed.
  • Regional airlines including Cathay Pacific and Asiana Airlines have also reported comprom…: Regional airlines including Cathay Pacific and Asiana Airlines have also reported compromised records tied to Amadeus.

Sources checked by our analysis pipeline: 1

The incident may have affected information processed between August 2023 and September 2026, the airline said on Sunday (Nov 1).

KUALA LUMPUR: Malaysia Airlines said on Sunday (Nov 1) that some customer information may have been affected by a cybersecurity incident involving Amadeus, its reservation-technology provider.

The airline joins Cathay Pacific Airways, Japan Airlines, South Korea’s Asiana Airlines and others in recent days that have reported customer data was compromised in the Amadeus breach.

Malaysia’s flag carrier said in a statement that the incident may have affected information processed between August 2023 and September 2026.

The airline said it is working with Amadeus and relevant parties to investigate the incident and assess its impact.

Malaysia Airlines said its information technology systems were not breached and there was no evidence that financial information had been accessed.

The airline encouraged customers to remain vigilant against suspicious or unsolicited communications, particularly those requesting personal or financial information.

Amadeus said it had become aware of a vulnerability affecting a travel booking display environment but did not respond to a question on how many customers’…

Technology