Singapore Airlines says 46,000 booking records hit following Amadeus breach

Singapore Airlines revealed on August 23, 2023, that 46,000 booking records had been compromised following a breach at Amadeus, a primary travel technology provider. The stolen data included passenger names, booking reference numbers, travel itineraries, and booking classes. In some cases, an additional 620 records contained email addresses, phone numbers, travel document details, and KrisFlyer membership numbers.

Amadeus, the Spanish technology company that manages reservations, bookings, and passenger management for airlines and airports, admitted that certain booking-display data was accessible to the attackers. However, they emphasized that no payment or financial data was accessed and that there were no indications of ransomware exploitation. The company quickly implemented measures to fix the vulnerability and enhanced monitoring and detection capabilities.

Numerous airlines were affected by the breach, including Cathay Pacific, Japan Airlines, and Korea Air. Cathay Pacific stated that 53,000 bookings were affected, with additional data such as email and phone contacts, travel documents, and frequent flyer numbers being exposed in a small subset of cases. Japan Airlines confirmed that around 92,000 customers were impacted, with approximately 2,000 of those whose passport numbers were also exposed.

All Nippon Airways reported 37,800 affected customers, including around 1,700 with additional data exposure.