Key facts
- Japan Airlines said 92,000 customers had information stolen in the breach.
- Singapore Airlines said 46,000 records were accessed.
- Cathay Pacific said 53,000 records were stolen, including booking numbers, passenger names and flight details.
- Amadeus said it fixed a vulnerability in a travel booking display environment and enhanced monitoring.
- Amadeus declined to say whether attackers contacted it or how many customers were affected in total.
Several airlines across Asia reported over the past week that customer information was accessed in a data security breach involving Spanish software provider Amadeus IT Group, which builds and maintains platforms for flight reservation, ticketing and check-in.
Japan Airlines said 92,000 customers had information stolen. Singapore Airlines said 46,000 records were accessed, and Cathay Pacific said 53,000 records were stolen, including booking numbers, passenger names and flight details. Some records included passports and other travel documents as well as frequent flyer numbers and email addresses.
A spokesperson for Amadeus told Recorded Future News that it recently became aware of a vulnerability affecting a travel booking display environment. "Certain booking-display data was accessible through the vulnerability," the spokesperson said, adding that the company had seen no evidence that payment or financial data was accessed and no indications the vulnerability was exploited for ransomware. Amadeus said it fixed the vulnerability and enhanced monitoring and detection, and is in dialogue with customers and authorities. The company declined to say whether attackers had contacted it or how many customers were affected in total.
Singapore Airlines said it would contact people with upcoming flights to change their exposed booking numbers and urged customers to be wary of malicious emails. All the airlines said the cyberattack on Amadeus did not affect their own systems or operations.
Amadeus reported more than $6.5 billion in revenue last year and has deals with hundreds of airlines and airports for IT services and technology platforms for ticketing and reservations.