INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Amadeus Global Airline Reservation System Hacked Exposing 90 Thousand Records

| 2026-10-31 11:57 CRITICAL LOW DATA BREACH CRITICAL INFRASTRUCTURE & OT
JSON
Executive Summary
AI-generated
A security breach was detected by Amadeus IT Group on October 30, 2026, involving unauthorized access to Japan Airlines' passenger service system (PSS), exposing reservation information for approximately ninety thousand two hundred passengers. The breach occurred between August 10, 2023, and September 23, 2026, affecting both Japan Airlines and Japan Transocean Air passengers. Amadeus IT Group is the identified entity behind the incident. Approximately ninety thousand people had their reservation numbers, names, travel dates, flight routes, and seat class information accessed, with an additional two hundred having their email addresses, phone numbers, passports, nationalities, mileage membership numbers, flight numbers, ticket numbers, and seat numbers exposed. The breach was not related to Japan Airlines alone, as Korean Air and Asiana Airlines also received a notification about the same supply chain breach from Amadeus on October 20th.
Technical Mitigations AI-generated
• Audit (ATT&CK mitigation for Phishing): Perform audits or scans of systems, permissions, insecure software, insecure configurations, etc. • Network Intrusion Prevention (ATT&CK mitigation for Phishing): Network intrusion prevention systems and systems designed to scan and remove malicious email attachments or links can be used to block activity. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
HK JP
aviationaviation
Incident Timeline
‎August 10, 2023
Threat actors exploited vulnerabilities in the Amadeus airline reservation system to expose approximately 90,000 personal records of passengers from Korea Air and Asiana Airlines.
industry Aviation
General Document Context
‎between August 10, 2023
Threat actors exploited vulnerabilities in Amadeus' global airline reservation system between August 10, 2023, and September 23, 2026.
‎September 23, 2026
Threat actors successfully breached Amadeus' global airline reservation system between August 10, 2023, and September 23, 2026.
industry Aviation
General Document Context
organisation Amadeus
Recently, Korean Air and Asiana Airlines also received a notification about a supply chain breach from Amadeus, the same vendor that was affected in Japan Airlines' case.
organisation Japan Airlines'
Recently, Korean Air and Asiana Airlines also received a notification about a supply chain breach from Amadeus, the same vendor that was affected in Japan Airlines' case.
organisation All Nippon Airways
Japan All Nippon Airways (ANA) reported that 37,800 passengers' information was affected, while Cathay Pacific Airways in Hong Kong stated that 50,000 unauthorized access to reservation information occurred.
organisation Cathay Pacific Airways
Japan All Nippon Airways (ANA) reported that 37,800 passengers' information was affected, while Cathay Pacific Airways in Hong Kong stated that 50,000 unauthorized access to reservation information occurred.
organisation Asiana Airlines'
However, the exact scale of the impact on Korean Air and Asiana Airlines' personal information has not been publicly disclosed, and further investigation is needed.
‎last October 20th
Threat actors used social engineering to trick Amadeus into revealing the vulnerabilities of its global airline reservation system, which was then exploited to expose 90,000 personal information records.
‎October 20
Threat actors breached the Amadeus global airline reservation system, exposing approximately 90,000 personal records of Korean Air and Asiana Airlines customers.
‎October 23
JAL reported the incident to Amadeus IT Group on October 23, confirming a three-year breach of their global airline reservation system.
‎October 30
Japan Airlines was notified of a security breach by Amadeus IT Group on October 30, indicating unauthorized access to its passenger service system.
target_region Japan
Japan Airlines (JAL) stated that it had been notified of a security breach by the supplier Amadeus IT Group on October 30, when unauthorized access to its passenger service system (PSS) was detected.
organisation Japan Airlines
Japan Airlines (JAL) stated that it had been notified of a security breach by the supplier Amadeus IT Group on October 30, when unauthorized access to its passenger service system (PSS) was detected.
organisation JAL
Japan Airlines (JAL) stated that it had been notified of a security breach by the supplier Amadeus IT Group on October 30, when unauthorized access to its passenger service system (PSS) was detected.
organisation PSS
Japan Airlines (JAL) stated that it had been notified of a security breach by the supplier Amadeus IT Group on October 30, when unauthorized access to its passenger service system (PSS) was detected.
‎2026/10/31
Amadeus IT Group's global airline reservation system was hacked, exposing the personal information of approximately ninety thousand two hundred passengers.
organisation Japan Transocean Air
The breach involved the exposure of reservation information for approximately ninety thousand two hundred passengers, including Japan Airlines and Japan Transocean Air passengers.
organisation Korea Air
Global airline reservation system 'Amadeus' hacked... 90,0002 thousand personal information exposed, recent Korea Air and Asiana Airlines also affected..
organisation Asiana Airlines
Global airline reservation system 'Amadeus' hacked... 90,0002 thousand personal information exposed, recent Korea Air and Asiana Airlines also affected..
organisation Amadeus IT Group
Amadeus IT Group, a global airline reservation system supplier, has confirmed that its system was hacked, exposing the personal information of approximately ninety thousand two hundred passengers.
organisation Korean Air
The incident has raised concerns about data breaches in the aviation industry, with domestic Korean Air and Asiana Airlines also reporting similar security incidents.
Intelligence Sources
Dailysecu 2026-10-31