Airline passenger data potentially accessed after reservation system data breach
A long-term security breach in the reservation systems of software provider Amadeus has potentially exposed the personal information of passengers across multiple global airlines. The unauthorized access, which may have lasted for three years, compromised data including names, passport numbers, and contact details for hundreds of thousands of travelers.
A security breach within the reservation software provided by the Spanish company Amadeus has potentially exposed the personal data of airline passengers worldwide. According to the Norwegian security service NSM, unauthorized individuals may have had access to these systems for approximately three years before the vulnerability was closed on September 23. Multiple major airlines, including Japan Airlines, Cathay Pacific, Singapore Airlines, Finnair, and Norwegian, have confirmed that passenger booking data was accessed during the incident.
The compromised information includes names, booking reference numbers, and flight details. In some instances, contact information such as email addresses, telephone numbers, and passport details were also accessed. While Amadeus maintains that the security flaw has been patched and there is no evidence that financial or payment data was compromised, the investigation into the full extent of the breach remains ongoing. The breach affects not only airlines but also various travel agencies and other tourism organizations that rely on Amadeus software for their booking operations.
Based on reporting by nu. Translated and condensed by LocalHeadlines.
