A significant cybersecurity incident has sent ripples through the airline industry, with several prominent Asian carriers confirming data breaches stemming from a cyberattack on their IT provider, **Amadeus IT Group**. The company, a giant in flight reservation, ticketing, and check-in platforms, acknowledged a vulnerability that allowed unauthorized access to booking-display data. ### The Amadeus Vulnerability **Amadeus** disclosed that a vulnerability within a travel booking display environment was exploited, making certain booking-display data accessible. While investigations are ongoing, the company has stated there is no evidence of payment or financial data being compromised, nor any indications of ransomware exploitation. **Amadeus** has since implemented corrective measures and enhanced monitoring capabilities. ### Affected Airlines and Exposed Data Among the airlines affected are **Japan Airlines**, **Cathay Pacific**, **Korean Air**, **Asiana Airlines**, **Singapore Airlines**, and **Malaysia Airlines**. The scope of data exposure varies by airline: * **Japan Airlines** reported approximately 92,000 customers had information stolen. * **Singapore Airlines** confirmed 46,000 records were accessed, including confirmation numbers, travel itineraries, and names. * **Cathay Pacific** disclosed that 53,000 records were compromised, encompassing booking numbers, passenger names, and flight details. Critically, some of these records also included passport and other travel document details, frequent flyer numbers, and email addresses. **Cathay Pacific** indicated that threat actors utilized "login credentials assigned to its system account" during the breach, though further specifics were not provided. All affected airlines have emphasized that their internal systems and operations were not directly impacted by the cyberattack on **Amadeus**. ### Customer Advisories and Industry Context In response to the breach, **Singapore Airlines** announced plans to contact customers with upcoming flights to advise them to change their now-exposed booking numbers and urged heightened vigilance against malicious emails. This incident underscores a growing trend of cyberattacks targeting the airline sector and its critical third-party vendors. The past year has seen numerous airlines, including **Iberia** and **Air Côte d'Ivoire**, fall victim to cyber incidents. Notably, **Qantas** experienced a breach exposing 6 million customer records, leading to significant repercussions for its senior executives. The reliance on interconnected systems and third-party providers like **Amadeus**, which reported over $6.5 billion in revenue last year and serves hundreds of airlines globally, creates complex attack surfaces that cybercriminals are increasingly exploiting.