Singapore Airlines says 46,000 booking records hit following Amadeus breach

Date:
Wed, 04 Nov 2026 16:10:00 +0000

Description:
The supply-chain incident at Amadeus is trickling down to affect more and
more airlines.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Singapore Airlines confirms customer data exposure through a breach at travel technology provider Amadeus Stolen booking records included passenger details, itineraries, and limited passport and loyalty-program information Multiple major airlines were affected, raising phishing and identity-fraud concerns for travelers
Singapore Airlines has become the latest in the seemingly growing list of airlines affected by a breach at a third-party technology provider.

Amadeus, a Spanish technology company that airlines and airports use to
manage reservations, bookings, and overall passenger management, recently issued a brief statement saying it became aware of a vulnerability affecting
a travel booking display environment. In the announcement, Amadeus said certain booking-display data was accessible to the attackers but stressed
that there was no evidence of payment or financial data being accessed.
Latest Videos From TechRadar Watch full video here:

There are no indications that this vulnerability has been exploited for ransomware purposes, the company said, adding that it implemented measures to fix the vulnerability as well as enhanced monitoring and detection capabilities.

In the meantime, numerous airlines started reporting sensitive data
compromise as a result of this breach. You may like Massive data breach sees 220 million traveler records exposed nine years of airline info leaked including passenger and passport details How did the Manchester Airports
Group cyberattack take place, and what data was exposed in the 8.7 million customer records? The experts weigh in Manchester Airports hack: Experts
weigh in on 8.7M data leak Cathay Pacific, Japan Airlines, and more Hong
Kongs flagship international airline, Cathay Pacific, issued a statement saying Amadeus notified it about a breach and unauthorized access to travel reservation data by a threat actor that used login credentials assigned to a system account.

Amadeus then told Cathay Pacific around 53,000 bookings were affected, and that the exposure took place between August 2023 and September 2026. In the majority of cases, the information accessed included booking reference, passenger name, and flight details, the airline said, adding that in a
smaller subset of cases, additional data such as email and phone contacts, travel documents and/or frequent flyer numbers were also exposed. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

The same day, Japan Airlines and Japan Transocean Air both shared similar news, saying a portion of customer reservation data had been accessed by an unauthorized third party.

Japan Airlines said some 92,000 customers were affected, including approximately 2,000 of those whose passport numbers were also exposed. All Nippon Airways said 37,800 of its customers were affected, including around 1,700 with additional data exposure. Korean Air, Asiana Airlines, and
Malaysia Airlines, all confirmed being affected by the Amadeus incident,
while Qantas said it was still investigating. Launching phishing attacks We can now add Singapore Airlines to that list, with 46,000 records of its own. These include customers' names, booking reference numbers, travel itineraries and booking classes and, in a smaller number of cases (around 620 booking records), email addresses, phone numbers, travel document details, and KrisFlyer membership numbers. What to read next Over 8.7 million karaoke fans at risk after major data breach Japanese giant Nippon Columbia says malware infection was to blame for exposing records Gyazo breach exposes 23.62
million user records and 490 million image records PII and metadata exposed in huge attack Nearly 9 million users hit in cyberattack on UK's biggest airport owner

According to Reuters , Singapore Airlines is now reaching out to affected customers with upcoming travel plans to change their booking reference
numbers as a precaution. The airline also confirmed that its IT systems were not breached.

So far, there is no indication that the stolen data ended up on the dark web, and no threat actors claimed responsibility for the breach, just yet. There
is a possibility that the culprits will try to extort the airlines for money, in exchange for deleting the stolen information.

This is the kind of data cybercriminals enjoy most. It allows them to launch highly personalized phishing emails that appear to come from the airlines themselves, referencing genuine booking details, flight dates, destinations and passenger names.

They could use this kind of information to trick unsuspecting travelers into clicking malicious links, sharing login credentials, or making fraudulent payments for supposed booking changes, refunds, or additional fees.

Whats more, the exposed passport details and frequent flyer numbers can also help criminals impersonate customers, try to take over peoples accounts, or launch identity fraud attacks against the airlines themselves. Even without financial information, simply by combining seemingly harmless travel details, cybercriminals can create enough context to make their scams considerably
more convincing, and thus more difficult to detect and prevent. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/singapore-airlines-says-46-000-booking- records-hit-following-amadeus-breach


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)