- Malaysia Airlines has revealed that some customer information may have been affected by a cyber incident at Amadeus.
- The incident could involve data processed between Aug. 2023 and Sept. 2026.
- Malaysia Airlines has stated that its own IT systems were not compromised.
- Names, booking references and flight details were primarily exposed, with email, phone and passport details affected for a smaller subset.
- Japan Airlines, Cathay Pacific, ANA, Korean Air, Asiana Airlines, Jin Air and Star Flyer have reported similar impacts.
Malaysia Airlines has revealed that some customer information may have been affected by a cybersecurity incident at its reservation technology provider Amadeus. The carrier has stated that its own IT systems were not compromised. The vulnerability originated in the Amadeus travel booking display environment.
The incident potentially affects customer details processed through the Amadeus system between Aug. 2023 and Sept. 2026. Malaysia Airlines has not detailed the number of affected passengers or specific data types. Broader disclosures indicate that names, booking references and flight details were primarily exposed, with email addresses, phone numbers and passport details accessed for a smaller subset of flyers.
Japan Airlines reported about 92,000 affected customers, Cathay Pacific about 53,000 bookings and ANA about 37,800 customers. Korean Air, Asiana Airlines, Jin Air and Star Flyer also reported impact. Malaysia Airlines has urged passengers to remain vigilant against unsolicited communications and to avoid sharing personal, password or financial details over unverified calls, texts or emails.
