Interfaz en español. Las fichas, los resúmenes y las fuentes conservan su idioma original.
Amadeus booking data breach: airlines notify affected passengers
Análisis del incidente
Amadeus and airline notices confirm unauthorized access to reservation data, including names, booking references and itineraries. Some subsets also include contact or passport details; the provider says it found no evidence of payment or financial data access.
Quiénes deben revisar: Passengers, corporate travel managers and security teams with bookings covered by an airline’s incident notice.
Check your airline’s notice and affected bookings. Verify unexpected travel messages through official channels and follow any instructions to replace booking references.
¿Qué ocurrió y por qué es relevante?
Amadeus confirms a vulnerability in a travel booking display environment. It says corrections and additional monitoring are in place, with no evidence of payment or financial data access and no indication of ransomware exploitation. Its investigation continues; the public statement does not identify a CVE or provide a complete technical account.
JAL and Japan Transocean Air report about 92,000 affected customers: names, reservation codes and travel details, with approximately 2,000 also involving additional fields such as passport and contact information. Their October 30 notice says flight operations are unaffected.
ANA identifies about 37,800 customers who made reservations between August 10, 2023 and September 23, 2026. Around 1,700 potentially had additional contact, passport and loyalty information accessed. ANA says credit card numbers and account passwords were not involved.
Cathay Pacific reports about 53,000 bookings, mostly involving names, booking references and flight details; a smaller subset potentially included additional personal information. It describes access using credentials assigned to an Amadeus system account and says Cathay’s systems and operations were unaffected.
According to CNA’s November 3 report of Singapore Airlines’ statement, about 46,000 booking records were accessed, with roughly 620 potentially including additional contact, travel document or loyalty details. The airline is contacting affected customers with upcoming travel to change booking references.
These counts mix customers and bookings; they cannot be added into a unique passenger total. Data fields and date definitions also differ by airline. The notices do not establish that every Amadeus customer or traveler was affected.
Oktsec recommends checking the carrier’s notice and verifying unexpected travel messages independently. Exposed itineraries can make impersonation more convincing. This is a precaution against potential misuse, not a finding that every affected passenger has received a fraudulent message.
- Proveedor / autor
- Amadeus
- Divulgado
- 30 oct 2026
- Última revisión de evidencia
- 4 nov 2026 UTC
¿Qué evidencia respalda este aviso?
Evidencia del incidente
Fundamento de la prioridad
Airlines confirm passenger data exposure and are contacting affected customers. Review the carrier’s scope and response instructions this week; escalate suspected misuse immediately. Provider containment does not remove the risk from information already accessed.
¿Qué implica para los entornos de IA?
The disclosures do not establish AI involvement. For travel assistants handling reservation data, Oktsec recommends limiting access to necessary records and verifying unexpected payment or itinerary change requests through an established airline channel.
Fuentes de este aviso
- Amadeus statement on the booking display vulnerabilityAmadeus · Revisado 4 nov 2026 UTC
- JAL and Japan Transocean Air: customer scope and responseJapan Airlines · Revisado 4 nov 2026 UTC
- ANA: unauthorized access to passenger reservation dataANA · Revisado 4 nov 2026 UTC
- Cathay Pacific: reservation data incident at AmadeusCathay Pacific · Revisado 4 nov 2026 UTC
- CNA reports Singapore Airlines’ November 3 statementCNA · Revisado 4 nov 2026 UTC
- EFE: Asian airlines affected by the Amadeus data breachEFE · Revisado 4 nov 2026 UTC
Historial editorial1 entrada
Added confirmed reservation data exposure, separate airline counts and passenger response guidance. Singapore Airlines figures are attributed to CNA’s report of its statement.
Prepará tu respuesta
Usá esta lista para evaluar si el aviso afecta a tus sistemas, registrar las acciones de tu equipo y compartir el resultado. Radar no escanea ni verifica tu entorno.
Los cambios se guardan automáticamente en este navegador. No se sincronizan con tu equipo ni se envían a Oktsec.
1. Evaluá si aplica a tu entorno
Leé el aviso y sus fuentes; después registrá tu decisión. Si tenés dudas, elegí «Requiere verificación».
2. Registrá la respuesta
Indicá el sistema y la persona o equipo responsable. Actualizá cada acción y agregá una referencia al ticket o notas sobre lo revisado.
Confirm affected bookings and data fields
Use the airline’s official notice and customer support to identify the affected booking references and exposed fields. Corporate travel teams should coordinate this check with their travel provider. An Amadeus connection alone does not establish exposure, and older reservations can be in scope.
Agregar evidencia o notas
Usá solo referencias. No guardes credenciales ni datos confidenciales acá.Follow the airline’s reservation instructions
For upcoming travel, confirm whether your airline requires a new booking reference. CNA reports that Singapore Airlines is contacting affected travelers for this purpose. Apply instructions specific to your carrier; this is not a universal request to replace passports or cancel flights.
Agregar evidencia o notas
Usá solo referencias. No guardes credenciales ni datos confidenciales acá.Verify unexpected travel and payment requests
Treat accurate names, flight details or reservation codes in a message as insufficient proof of identity. Open the airline’s official app or website independently and verify unexpected payment, refund or itinerary requests. Preserve suspicious messages and report them to the airline and your security team.
Agregar evidencia o notas
Usá solo referencias. No guardes credenciales ni datos confidenciales acá.Track notices and respond to signs of misuse
Record the airline’s findings, notification date and any changes to the exposure scope. If passport or loyalty details are identified in your notice, follow the issuer’s or airline’s guidance for that information. Escalate evidence of misuse promptly; provider containment cannot retract data already accessed.
Agregar evidencia o notas
Usá solo referencias. No guardes credenciales ni datos confidenciales acá.
3. Compartí el plan
Descargá un archivo Markdown con tu decisión, los estados de las acciones, las notas y las fuentes. Compartilo con tu equipo o adjuntalo a un ticket.
Sistemas afectados y correcciones
Compará la versión en ejecución y la configuración con las indicaciones del proveedor.
| Producto | Afectado | Versión corregida / acción |
|---|
Confirmá con el proveedor las correcciones adaptadas a tu distribución. Coincidir en el producto no basta para establecer exposición.
Evidencia y fuentes
Por qué tiene esta prioridad
Airlines confirm passenger data exposure and are contacting affected customers. Review the carrier’s scope and response instructions this week; escalate suspected misuse immediately. Provider containment does not remove the risk from information already accessed.
Criterios de prioridadFuentes
Los datos técnicos provienen de estas fuentes. Las prioridades y las acciones recomendadas son el análisis de Oktsec.
- Amadeus statement on the booking display vulnerabilityAmadeus · Aviso del proveedor · Revisado 4 nov 2026 UTC
- JAL and Japan Transocean Air: customer scope and responseJapan Airlines · Aviso del proveedor · Revisado 4 nov 2026 UTC
- ANA: unauthorized access to passenger reservation dataANA · Aviso del proveedor · Revisado 4 nov 2026 UTC
- Cathay Pacific: reservation data incident at AmadeusCathay Pacific · Aviso del proveedor · Revisado 4 nov 2026 UTC
- CNA reports Singapore Airlines’ November 3 statementCNA · Informe de prensa · Revisado 4 nov 2026 UTC
- EFE: Asian airlines affected by the Amadeus data breachEFE · Informe de prensa · Revisado 4 nov 2026 UTC
Registro técnicoProductos, identificadores y detalles de respaldo
| Producto / servicio | Amadeus booking recordsAmadeus |
|---|---|
| Evidencia | Incidente confirmado por el proveedor |
| Exposure | Depende de la aplicación o configuración |
- Divulgado
- 30 oct 2026
- Registro revisado
- 4 nov 2026 UTC
Para entornos con agentes de IA
The disclosures do not establish AI involvement. For travel assistants handling reservation data, Oktsec recommends limiting access to necessary records and verifying unexpected payment or itinerary change requests through an established airline channel.