Airline booking data breach affects Asian companies

Malaysia Airlines announced that customer data may have been affected by a cyber breach targeting Amadeus, a provider of airline booking systems, impacting Asian carriers including Cathay Pacific, Japan Airlines, and South Korea's Asiana.

Malaysia Airlines announced on Sunday that some customer data may have been compromised in a cyber breach targeting Amadeus, a provider of airline ticketing systems, in a security incident that affected several Asian airlines, including Cathay Pacific, Japan Airlines, and South Korea's Asiana. The Malaysian carrier said in a statement that the incident may have involved customer information processed through Amadeus systems between August 2023 and September 2026, stressing that its internal technical systems were not breached and that there is currently no evidence of unauthorized access to financial data. The company did not specify the number of affected customers or the nature of the potentially exposed information, noting that it is cooperating with Amadeus and relevant authorities to investigate the incident and assess its impact. Malaysia Airlines urged customers to be cautious of suspicious messages and communications. Amadeus acknowledged discovering a security vulnerability affecting a dedicated technical environment for displaying travel bookings, but did not provide a response regarding the total number of customers whose data may have been affected. The company said investigations are ongoing and announced measures to contain the incident and enhance monitoring and security detection systems. Japan Airlines and Japan Transocean Air had previously announced that data of approximately 92,000 customers was affected by unauthorized access.