Airlines investigate data breach linked to tech provider Amadeus
Airlines across the Asia-Pacific region are assessing data exposure following a cybersecurity incident involving travel technology vendor Amadeus IT Group. Major carriers including Qantas, Cathay Pacific, and Malaysia Airlines are investigating potential impacts on customer booking data. While individual airline networks remained secure, thousands of travel bookings were exposed during unauthorized system access.
What happened
- Aug 2023 – Sep 2026
Unauthorized access occurs within a system maintained by travel software vendor Amadeus [2].
- Sep 2026
Amadeus stops the security breach, performs password resets, and deploys extra system monitoring [2].
- 2 Nov 2026
Qantas contacts Australian cyber security authorities and works with Amadeus to review affected customer bookings [1], [2].
What you need to know
Internal airline databases and systems were not directly breached [2].
Cathay Pacific stated that approximately 53,000 of its flight bookings were affected [2].
Amadeus reported finding no evidence that the accessed information has been misused [2].
Air New Zealand confirmed it does not believe its bookings or operations were impacted [2].
The full number of compromised travel records across all affected carriers has not been confirmed. It remains unclear exactly what specific types of customer details were exposed during the security event.
Background
Amadeus IT Group is a global travel technology firm that delivers software, biometric tools, and artificial intelligence capabilities to more than 400 airlines around the world. Because travel providers rely on shared vendors for booking management, technical breaches at third-party software firms can impact multiple flight networks at once.
Airlines identified in connection with the incident include Qantas, Cathay Pacific, Malaysia Airlines, Korean Air, Asiana, Japan Airlines, and ANA. Industry commentators note that the breach highlights ongoing cybersecurity challenges surrounding supply chain access and vendor data protection.
Questions people ask
Which airlines are connected to the Amadeus security breach?
Carriers named in reports include Qantas, Cathay Pacific, Malaysia Airlines, Korean Air, Asiana, Japan Airlines, and ANA [2].
Were internal airline networks compromised?
No. Airlines reported that their own internal infrastructure and customer databases remained completely secure [2].
Has any compromised passenger data been exploited?
Amadeus indicated that there is currently no evidence showing that any affected booking information was misused [2].
Where this came from
[1] theage.com.au
Australia news live: Westpac profits total $6.8 billion as further interest rate rise looms; Qantas seeks answers on data breach
Preview image from theage.com.au
[2] nzherald.co.nz
Airlines including Qantas, Cathay Pacific impacted in Amadeus cyber attack
Preview image from nzherald.co.nz
Found through Google Trends and drafted with AI from at least two cited sources. Published automatically after passing our automated checks for sources, wording and safety. It may not have been reviewed by a person yet. Report a correction.