Malaysia Airlines says customers may be affected by Amadeus breach

Malaysia Airlines said on Sunday that a cybersecurity incident at reservation-technology provider Amadeus could have exposed some customer information. The airline said the data may relate to bookings processed from August 2023 through September 2026, and that it is working with Amadeus and other parties to establish the incident’s impact.

The carrier said its own IT systems had not been breached and that it had found no indication that financial details were accessed. It urged customers to watch for suspicious messages, while Amadeus acknowledged a vulnerability in a travel-booking display environment but did not say how many people were affected. Business Recorder reported that Cathay Pacific and Japan Airlines had recently cited the incident, with data linked to 53,000 bookings and 92,000 customers, respectively.