- Singapore Airlines has confirmed that about 46,000 booking records were affected by a cybersecurity incident at Amadeus
- The exposed data included names, itineraries and booking references
- The airline said its own systems were not breached
- Payment details were not compromised
- Several other carriers have reported similar impacts from the same incident
Singapore Airlines is the latest airline to confirm that approximately 46,000 booking records were affected by a cybersecurity incident at travel technology provider Amadeus. The incident stemmed from a vulnerability in a travel booking display environment that allowed unauthorised access via a valid system account, exposing international travel reservation data processed between August 2023 and September 2026. Singapore Airlines noted that its own internal IT systems were not breached and that flight bookings were not modified.
The exposed data included customer names, booking reference numbers, travel itineraries and booking classes. A higher-exposure subset of approximately 620 records included email addresses, phone numbers, passport and travel document details and KrisFlyer membership numbers. Amadeus confirmed that no credit card numbers, passwords or bank account information were leaked.
Singapore Airlines is one of several global carriers navigating data exposure from this shared infrastructure breach. Japan Airlines reported 92,000 customers affected, Cathay Pacific reported 53,000 booking records affected, Malaysia Airlines reported customer data exposed and Asiana Airlines reported customer data compromised. Singapore Airlines is contacting affected passengers with upcoming travel plans and assisting them in changing booking reference numbers.
