Thai Airways says 60,529 passenger booking records exposed in Amadeus breach

BANGKOK — On November 10, 2026, Thai Airways International announced that roughly 60,529 passenger booking records were accessed without authorization in a security breach involving Amadeus IT Group S.A., the airline's reservation and passenger service provider. Thai Airways learned of the incident from Amadeus following a notification of unauthorized access to passenger reservation data stored in Amadeus' systems between August 10, 2023 and September 23, 2026.

According to the investigation, approximately 60,529 passenger records were compromised, encompassing names, booking reference numbers (PNRs), travel dates, routes, and class. An additional 376 passenger records may have also been affected. In addition to the aforementioned data, these records might have contained email addresses, phone numbers, passport numbers, nationalities, frequent flyer membership numbers, flight and ticket numbers, seat allocations, and other related details.

The airline assured that passengers' credit card information remained unaffected by the breach. Amadeus stated that user accounts involved in the unauthorized access had been disabled and all compromised passwords changed. The company further bolstered its monitoring and surveillance systems to deter future incidents. Thai Airways reiterated that the breach did not affect its own systems or operations, and that the protection of personal data is a top priority.

The company reported the incident to the relevant authorities and is currently reviewing the information provided by Amadeus. Passengers confirmed to have had their information compromised will receive individual notifications once the details are confirmed. Thai Airways expressed regret for any concern or inconvenience caused by the incident.