Global airline bookings affected by 'Amadeus breach' incident: What flyers should do

For the past three years, data of passengers on several global airlines who reserved aeroplane tickets were exposed, leaking highly sensitive personal information. The incident was caused due to a cybersecurity incident on the travel booking infrastructure provider named Amadeus, based in Spain's Madrid.

Over a 100 airlines use Amadeus' infrastructure and now, around eight major global airlines have confirmed that they doubt leakage of data and are investigating the same. The airlines that have revealed that they suffered an impact include Japan Airlines, Cathay Pacific Airways, Singapore Airlines, All Nippon Airways, Malaysia Airlines, Korean Air, Asiana Airlines, Condor and Qantas Airlines.

How did the breach happen?
As per reports, the Amadeus Breach happened after an unauthorised party accessed passenger data inside the group's systems using valid login credentials. They did it apparently from August, 2023 to September, 2026. As a consequence, there was a massive leakage of personal information and travel data.

The details include:
a) Names
b) Contact information
c) Itinerary details
d) Booking reference numbers and frequent flyer numbers
e) International passport data

Apparently, financial data like bank account details and credit card details are still safe. This is because the unauthorised access only provided entry to specific files, and the payment details are handled through a separate gateway. Both the airlines and Amadeus have confirmed that financial data has not been leaked after their audit.

What are the airlines and Amadeus doing
As per reports, Amadeus says that it has now patched the vulnerability and removed the unauthorised access. The airlines are also contacting passengers whose data were leaked to issue new reference numbers.

What can flyers do?
Flyers should check whether they have travelled with the affected airlines in the August 10, 2023 to September 23, 2026 window. If so, do the following:
a) Watch out for phishing emails - fake texts or emails claiming to be from the airline. Do not click on links asking you to 'verify' your account or take similar steps.
b) Change your frequent flyer passwords.
c) Check whether you have any email from the airline about a data breach, security notice or 'Amadeus' breach.
d) If you have an upcoming flight with any of these airlines, look for a new booking or PNR code emailed to you.