Malaysia Airlines says customers may be affected by Amadeus breach

Malaysia Airlines disclosed on Sunday that a cybersecurity incident involving its reservation-technology provider, Amadeus, may have impacted some customer information. This follows a series of recent reports from airlines such as Cathay Pacific Airways, Japan Airlines, and South Korea’s Asiana Airlines, all of which have confirmed customer data compromise in the Amadeus breach.

The Malaysian flag carrier noted in a statement that the incident may have compromised information processed between August 2023 and September 2023. Malaysia Airlines emphasized that its IT systems remained unaffected and there was no evidence of financial information being accessed. The airline urged customers to remain vigilant against suspicious communications, particularly those seeking personal or financial details.

Amadeus acknowledged a vulnerability in a travel booking display environment but declined to disclose the number of customers affected. Earlier this week, Cathay Pacific and Japan Airlines reported that the breach had affected 53,000 bookings and 92,000 customers, respectively.