Singapore Airlines Warns 46,000 Bookings Hit by Amadeus Cyber Breach
Singapore Airlines warns 46,000 booking records may be exposed after a cyber breach at technology provider Amadeus. Find out what data was leaked.
Singapore Airlines has revealed that approximately 46,000 booking records may have been compromised following a cybersecurity breach at Amadeus, the airline's third-party reservation technology provider. This incident is part of a larger wave of data exposure affecting several major carriers that rely on the same technology infrastructure.
What Data Was Exposed?
According to reports, the breach primarily involved general booking details. The information potentially accessed includes:
- Customer names
- Booking reference numbers
- Travel itineraries
- Booking classes
However, a smaller subset of the data was more sensitive. In about 620 booking records, additional personal details may have been exposed, including email addresses, phone numbers, travel document information, and KrisFlyer membership numbers.
The Silver Lining: Financial Data Safe
Despite the breach, there is some relief regarding financial security. Amadeus has confirmed that bank account details and credit card information were not leaked. Furthermore, Singapore Airlines clarified that its own internal IT systems were not breached, and there is no evidence that any existing bookings were modified by unauthorized parties.
Immediate Actions Taken
To mitigate the risk of unauthorized access to passenger reservations, Singapore Airlines is taking proactive steps. The carrier is currently contacting affected customers who have upcoming travel plans and is changing their booking reference numbers as a precautionary measure.
A Global Ripple Effect: Other Airlines Affected
Singapore Airlines is not the only victim of this vulnerability. The breach has impacted a wide array of airlines using Amadeus' reservation technology, revealing a significant systemic weakness. Other carriers reporting compromised data include:
- Japan Airlines: Reported that information concerning 92,000 customers was involved.
- Cathay Pacific Airways: Stated that data relating to 53,000 bookings was affected.
- Malaysia Airlines: Indicated that the incident could have impacted customer information processed between August 2023 and September 2026. Like Singapore Airlines, they confirmed their own IT systems remained secure and no financial data was accessed.
- Asiana Airlines: South Korea's carrier also reported that some customer information may have been compromised.
The Source of the Leak
Amadeus acknowledged the situation, stating that it discovered a vulnerability within a travel booking display environment. While the company has confirmed the breach, it has not yet disclosed the total number of customers globally whose information may have been affected across all its clients.
Singapore Airlines continues to reach out to impacted passengers as it works to address the potential exposure and secure customer information.