Multiple airlines in Asia have reported data breaches linked to a cyberattack on Amadeus IT Group, a Spanish IT provider responsible for flight reservation and ticketing systems. Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines, and Malaysia Airlines disclosed incidents over the past week, revealing that customer data was compromised due to a vulnerability in Amadeus’s systems.
Amadeus acknowledged the breach, stating that it became aware of a vulnerability affecting a travel booking display environment. A spokesperson confirmed that “certain booking-display data was accessible through the vulnerability,” but emphasized that there is no evidence suggesting that payment or financial data was accessed. The company has since implemented measures to address the vulnerability and enhance monitoring capabilities, maintaining communication with affected customers and authorities.
Japan Airlines reported that approximately 92,000 customer records were compromised, while Singapore Airlines indicated that 46,000 records were accessed. Cathay Pacific confirmed that hackers stole 53,000 records, which included sensitive information such as booking numbers, passenger names, flight details, and in some cases, passports and frequent flyer numbers. The breach was reportedly facilitated by the use of “login credentials assigned to its system account,” although further details about the incident were not disclosed.
In response to the breach, Singapore Airlines announced it would contact affected customers with upcoming flights to change their exposed booking numbers and advised them to remain vigilant against potential phishing attempts. All airlines involved stated that the cyberattack on Amadeus did not affect their own systems or operations.
Amadeus, which reported over $6.5 billion in revenue last year, provides IT services and technology platforms to hundreds of airlines and airports. The incident highlights a growing trend of cyberattacks targeting the aviation sector, with numerous airlines experiencing breaches in recent years. Notably, incidents in 2022 included a breach affecting Spanish airline Iberia and a significant data theft from Australian airline Qantas, which resulted in substantial fines for the company.
As investigations continue, the full extent of the impact on customers and the potential for further malicious activity remains to be seen. The incident underscores the importance of robust cybersecurity measures in protecting sensitive customer data within the aviation industry.
