ENKR

Amadeus passenger service system: unauthorised access to airline booking data

Add to my breach check

Made public

What leaked5

Hard to replace

  • Passport number
  • Mobile number
  • Email address
  • Other profile data

Permanent

  • Full name
  • Passport numbersome passengers
  • Mobile numbersome passengers; phone number · type not stated
  • Email addresssome passengers
  • Other profile databooking reference and flight details; for some passengers nationality and frequent flyer numbers

To-dos1 · about 5 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: phishing messages

What happened next7 events

  1. UndetectedNone on record
  2. Response 7 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. NH Travel posted a notice that some customers' flight booking numbers leaked
  2. By the article date, no evidence of misuse found so far, as Cathay Pacific relayed
  3. By the article date, Amadeus said it found a security weakness in a tool that displays booking information and was still investigating
  4. ANA announced unauthorised access to booking data of ANA flights
  5. JAL and Japan Transocean Air announced unauthorised access to booking data of about 92,000 people
  6. By the article date, Amadeus blocked the access path and ran dark web monitoring
  7. Korean Air and Asiana announced signs that some customers' booking numbers leaked from the Amadeus system
Company
Amadeus passenger service system
When it happened
–
Made public
Affected
unknown; Amadeus gives no count. Airline figures: JAL and Japan Transocean Air about 92,000 customers, ANA about 37,800 customers, Cathay Pacific about 53,000 bookings · press

Sources