Massive Data Breach Hits Six Major Asian Airlines

Airline reservations contain more information than a passenger’s name and destination.

Booking references, travel dates, flight details, and frequent-flyer information can reveal substantial information about someone’s travel plans, making the security of reservation systems important for international passengers.

A recent security incident involving one of the technology companies airlines rely on for booking operations has raised questions about how passenger information is protected outside an airline’s own systems.

Singapore Airlines has now disclosed the scale of its exposure, including a smaller subset of bookings that contain additional personal information.

Nov. 3 Disclosure Confirms 46,000 Breached Amadeus PNR Records

Approximately 46,000 Singapore Airlines booking records were accessed without authorization in a data breach involving Amadeus, the Spanish travel technology company that supports some of the airline’s reservation and booking processes.

Singapore Airlines disclosed the incident on November 3, according to Channel NewsAsia.

The exposed information included passengers’ names, booking reference numbers, travel itineraries and booking classes.

For approximately 620 booking records, additional information may also have been accessed, including:

• Email addresses and telephone numbers

• KrisFlyer frequent flyer membership numbers

The distinction matters because the incident did not expose the same amount of personal information across all affected bookings.

Singapore Airlines also clarified that its own IT systems were not breached. The unauthorized access involved customer information held on Amadeus’ platform.

Payment Data Remains Secure as 620 Records Leak KrisFlyer Info

Despite the exposure of passenger information, Singapore Airlines said Amadeus confirmed that bank account and credit card details were not accessed.

The airline also confirmed that no bookings were changed as a result of the incident.

Amadeus has implemented containment measures and additional security safeguards following the incident.

The company has also been investigating the vulnerability affecting its travel booking environment.

Amadeus Breach Hits 92,000 JAL and 53,000 Cathay Pacific Records

Singapore Airlines is not the only carrier reporting customer information compromised through Amadeus.

Other airlines that have disclosed exposure include:

• Japan Airlines: Approximately 92,000 customers had reservation information accessed.

• Cathay Pacific: Around 53,000 bookings were affected.

• ANA: Approximately 37,800 customers had reservation information potentially compromised.

• Malaysia Airlines: Confirmed that some customer information processed through Amadeus may have been affected.

• Asiana Airlines: Also reported exposure of customer information.

Reuters reported on the incidents involving Cathay Pacific and Malaysia Airlines, while The Record provided further details on the growing number of affected airlines.

The figures refer to different categories, including individual customers and booking records.

Singapore Airlines Issues New Booking Reference Numbers for Flyers

Singapore Airlines is contacting affected customers who have upcoming trips to arrange changes to their booking reference numbers as a precaution.

Passengers should monitor communications from the airline, particularly those with upcoming international journeys.

Anyone receiving an unexpected message claiming to be related to the breach should verify it on Singapore Airlines’ official website or through its customer service channels.

The airline has informed the relevant authorities and apologized to affected customers.

More Airlines News

This story was originally published by TravelHost on Nov 7, 2026, where it first appeared in the Airlines section. Add TravelHost as a Preferred Source by clicking here.