Cathay Pacific says 53,000 bookings affected by unauthorised data access
KUALA LUMPUR: About 53,000 Cathay Pacific bookings are affected by unauthorised access to passenger reservation data held by its third-party technology provider Amadeus.
Cathay Pacific has disclosed that approximately 53,000 bookings have been impacted by unauthorised access to passenger reservation data from its third-party technology provider, Amadeus. The breach occurred between August 2023 and September 2026, when an unauthorised party exploited login credentials assigned to an Amadeus system account.
The majority of the affected records contained booking references, passenger names, and flight details. A smaller subset of records might have included email addresses, phone numbers, travel document information, and frequent flyer numbers. There is no evidence to suggest financial or payment information was compromised. Cathay Pacific became aware of the incident on October 28 following a notification from Amadeus, which subsequently provided further details the following day.
Amadeus, a global travel technology firm serving numerous airlines, has taken steps to mitigate the situation, such as resetting passwords and enhancing its monitoring and detection systems. No misappropriation of the affected data has been identified. The incident has not affected Cathay Pacific's systems or flight operations. The airline has notified the appropriate authorities and is conducting an ongoing investigation, incorporating the information furnished by Amadeus.
Cathay Pacific plans to notify affected customers individually once they have gathered sufficient information. The company extends its apologies to customers for the concern and inconvenience caused by this incident.
Written by urgent.news from New Straits Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
