conv.

All stories
SecurityQuiet 10d · day 12

Malaysia Airlines joins Amadeus breach, affecting customer data from Aug 2023–Sept 2026

The airline becomes the latest carrier to report data compromise through the Spanish booking system provider's vulnerability.

newest coverage 9d agosummary written 9d ago4 pieces NewswiresGoogle News

What to know

  • Malaysia Airlines reported on November 1 that customer data from August 2023 through September 2026 may have been compromised via a vulnerability in Amadeus, the Spanish reservation-technology provider.
  • Multiple airlines—including Cathay Pacific (53,000 bookings), Japan Airlines (92,000 customers), and Asiana—have been affected by the same Amadeus vulnerability.
  • Malaysia Airlines stated its own IT systems were not breached and found no evidence of financial information access, but Amadeus has not disclosed total customer impact.
  • The breach stems from a vulnerability in Amadeus's travel booking display environment, details of which remain limited.

“Amadeus said it had become aware of a vulnerability affecting a travel booking display environment but did not respond to a question on how many customers' data were affected.”

Amadeus · Channel News Asia ↗

Malaysia Airlines Affected airlineAmadeus Reservation-technology providerCathay Pacific Airways Affected airlineJapan Airlines Affected airline

Malaysia Airlines joins Amadeus breach, affecting customer data from Aug 2023–Sept 2026
Bangkok Post

How it unfolded 2 developments, newest first · click a bar or a number to jump articles

Peak 1 piece in 3h at Oct 30, 2 PM; 4 pieces over 12 days (4 articles) Oct 30, 2 PM — 1 piece · 1 article — Google News 1Oct 30, 5 PM — quietOct 30, 8 PM — quietOct 30, 11 PM — quietOct 31, 2 AM — quietOct 31, 5 AM — quietOct 31, 8 AM — quietOct 31, 11 AM — quietOct 31, 2 PM — quietOct 31, 5 PM — quietOct 31, 8 PM — quietOct 31, 11 PM — 1 piece · 1 article — Newswires 1Nov 1, 1 AM — quietNov 1, 4 AM — quietNov 1, 7 AM — quietNov 1, 10 AM — quietNov 1, 1 PM — quietNov 1, 4 PM — quietNov 1, 7 PM — 1 piece · 1 article — Newswires 1Nov 1, 10 PM — quietNov 2, 1 AM — 1 piece · 1 article — Newswires 1Nov 2, 4 AM — quietNov 2, 7 AM — quietNov 2, 10 AM — quietNov 2, 1 PM — quietNov 2, 4 PM — quietNov 2, 7 PM — quietNov 2, 10 PM — quietNov 3, 1 AM — quietNov 3, 4 AM — quietNov 3, 7 AM — quietNov 3, 10 AM — quietNov 3, 1 PM — quietNov 3, 4 PM — quietNov 3, 7 PM — quietNov 3, 10 PM — quietNov 4, 1 AM — quietNov 4, 4 AM — quietNov 4, 7 AM — quietNov 4, 10 AM — quietNov 4, 1 PM — quietNov 4, 4 PM — quietNov 4, 7 PM — quietNov 4, 10 PM — quietNov 5, 1 AM — quietNov 5, 4 AM — quietNov 5, 7 AM — quietNov 5, 10 AM — quietNov 5, 1 PM — quietNov 5, 4 PM — quietNov 5, 7 PM — quietNov 5, 10 PM — quietNov 6, 1 AM — quietNov 6, 4 AM — quietNov 6, 7 AM — quietNov 6, 10 AM — quietNov 6, 1 PM — quietNov 6, 4 PM — quietNov 6, 7 PM — quietNov 6, 10 PM — quietNov 7, 1 AM — quietNov 7, 4 AM — quietNov 7, 7 AM — quietNov 7, 10 AM — quietNov 7, 1 PM — quietNov 7, 4 PM — quietNov 7, 7 PM — quietNov 7, 10 PM — quietNov 8, 1 AM — quietNov 8, 4 AM — quietNov 8, 7 AM — quietNov 8, 10 AM — quietNov 8, 1 PM — quietNov 8, 4 PM — quietNov 8, 7 PM — quietNov 8, 10 PM — quietNov 9, 1 AM — quietNov 9, 4 AM — quietNov 9, 7 AM — quietNov 9, 10 AM — quietNov 9, 1 PM — quietNov 9, 4 PM — quietNov 9, 7 PM — quietNov 9, 10 PM — quietYesterday, 1 AM — quietYesterday, 4 AM — quietYesterday, 7 AM — quietYesterday, 10 AM — quietYesterday, 1 PM — quietYesterday, 4 PM — quietYesterday, 7 PM — quietYesterday, 10 PM — quietToday, 1 AM — quietToday, 4 AM — quietToday, 7 AM — quietToday, 10 AM — quietToday, 1 PM — quietToday, 4 PM — quietToday, 7 PM — quiet 1–2
Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9yesterdaynow · 9:50 PM ET
  1. 1

    Amadeus acknowledges vulnerability in booking display environment

    Amadeus confirms it became aware of a vulnerability affecting a travel booking display environment but does not respond to questions about the number of affected customers.

  2. background

    Malaysia Airlines assures customers of IT system integrity — The airline states that its own IT systems were not breached and there is no evidence that financial information had been accessed. The airline encourages customers to remain vigilant against suspicious communications requesting personal or financial information.

  3. 2

    Malaysia Airlines confirms customer data affected by Amadeus breach

    Malaysia Airlines announces that some customer information may have been compromised by a cybersecurity incident involving Amadeus, its reservation-technology provider. The incident may have affected information processed between August 2023 and September 2026.

    “The incident may have affected information processed between August 2023 and September 2026.”
    — Malaysia Airlines · source

    1. 4 outlets first by VnExpress International, 9d ago · also Bangkok Post, Channel News Asia, Reuters · read ↗

  4. background

    Multiple airlines report customer data compromised in same Amadeus incident — Cathay Pacific Airways, Japan Airlines, and South Korea's Asiana Airlines report customer data breaches linked to the Amadeus vulnerability. Cathay Pacific reports 53,000 bookings affected, while Japan Airlines reports 92,000 customers affected.