Malaysia Airlines warns customers of data exposure in Amadeus cybersecurity breach

Malaysia Airlines has informed passengers that their personal data could have been compromised in a cybersecurity breach at Amadeus, a third-party technology provider responsible for the airline's reservation system. The incident is believed to have affected customer information processed through Amadeus between August 2023 and September 2026, spanning approximately three years.

Malaysia Airlines emphasized that its internal IT systems remained unaffected. The airline has not confirmed whether financial information was accessed and stated they are taking the matter seriously, collaborating with Amadeus and relevant parties to investigate and evaluate the incident's impact. Specific details regarding the number of affected customers, the types of personal data involved, and the circumstances of the breach have not been disclosed.

As a precaution, Malaysia Airlines advised customers to remain vigilant for suspicious communications requesting personal or financial details, which are often follow-up tactics used by criminals exploiting leaked data for phishing attempts. The airline reiterated its commitment to the privacy and protection of customer information and pledged to provide updates as more information becomes available.