Short answer: A cyberattack on Amadeus, a Spanish IT provider, led to data breaches at multiple Asian airlines. Customers of Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines, and Malaysia Airlines may have their data compromised. Check your accounts and change passwords if needed.
TL;DR
- Amadeus, an IT provider, was hacked.
- Airlines using Amadeus services reported data breaches.
- Customer details, including booking numbers and names, were stolen.
- Companies advise changing booking numbers and being cautious.
What happened at Spanish?
The incident exposed customer information like booking numbers and names. Airlines are advising customers to be vigilant and possibly change their booking numbers.
- Vulnerability
- A mistake or weakness in software that an attacker can misuse.
- Data breach
- When private information is stolen or exposed to people who should not see it.
Key facts
| Reported by | The Record |
|---|---|
| Date reported | 05 Nov 2026 |
How it works
A vulnerability in Amadeus' IT systems allowed hackers to access customer data.
- Vulnerability in Amadeus IT systems
- Hackers accessed customer data
- Data breaches reported by airlines
Timeline
| Date | Event | Source |
|---|---|---|
| 2026-11-05 | Reported by The Record | The Record |
| 2026-11-11 | This Skillmate explainer published | Skillmate |
How to fix it
- If you have an account with the affected company, change that password and any reused copies of it.
- Turn on two-factor authentication (a second login step) wherever the service offers it.
- Expect phishing emails or calls that use the exposed details; verify requests through official channels.
How to detect it
Defenders should look for unusual logins or access to booking data.
Signs to watch for:
- Login alerts from new devices or locations on the affected account.
- Password-reset emails you did not ask for.
- Phishing messages that quote your real account details.
What is confirmed
- Reported by The Record
Why it matters
It highlights the importance of robust security measures and the potential impact of vulnerabilities on customer data. Students should learn about such risks in cybersecurity.
Learn the skills behind this story
Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.
FAQ
What happened to Amadeus?
Amadeus, an IT provider for airlines, had a vulnerability that exposed customer details like booking numbers, names, and flight information to hackers.
Which airlines were affected?
Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines, and Malaysia Airlines all reported data breaches.
How many customers were affected?
Japan Airlines said 92,000 customers had information stolen, while Singapore Airlines said 46,000 records were accessed.
What data was stolen?
Hackers stole booking numbers, passenger names, flight details, and occasionally passports, email addresses, and frequent flyer numbers.
What did Amadeus do?
Amadeus implemented fixes, enhanced monitoring, and contacted customers. They did not confirm if attackers contacted them.
Sources
How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.
Watch today's video brief: https://youtu.be/yaK-CF987xg