Amadeus Data Breach

[elanshin]

Seems like we're now getting some details of the breach on Amadeus systems with KE and OZ disclosures. Seems like its been multiple years as well

I have a feeling we're going to see a lot more airlines saying they were affected by it too over the next while.

 

[SYD]

Might explain why the CMT app has been “bricked”…?

Although most (if not all?) airlines have pretty much locked down their MMBs to PNRs including their flights (or at least one sector).

The days of using the rj.com hack (no pun intended) are long gone.

 

[elanshin]

Do following the KE/OZ disclosure, JAL have disclosed potential 92000 affected trips and ANA have also reported they likely have affected customers too.

Cathay have disclosed they have 52000 affected trips.

 

[AuSammy]

https://loyaltylobby.com/2026/10/31/massive-amadeus-hack-affecting-hundreds-of-thousands-of-passengers-across-multiple-airlines/

Three years allegedly undiscovered

 

[eastwest101]

https://loyaltylobby.com/2026/10/31/massive-amadeus-hack-affecting-hundreds-of-thousands-of-passengers-across-multiple-airlines/

Three years allegedly undiscovered

Assuming that financial details such as credit cards, etc were not compromised (as per the press releases from various airlines), but if names, PNRs, flight details, and contact details such as phone numbers and email addresses have been harvested, I can see this being made public now will change the game for the scammers.

I guess the most likely modus operandi will be:

1. general trade and sale of personal details to match with other previous hacks to match identities for future identity theft
2. phone calls to call centres attempting to get refunds credited to a new or different payment methods?
3. cancellation of PNRs and then a mass spam campaign with links purporting to be from airlines with malware embedded in links to "fix" this problem, which will really gain access to users' data and/or try to trick them into entering financial data.