Malaysia Airlines Warns Customers Their Data May Be Exposed in the Amadeus Reservation Breach

Malaysia Airlines has told customers that some of their personal information may have been exposed in a security incident at Amadeus, the company that runs its reservation system. The data at risk is customer information processed through Amadeus between August 2023 and September 2026, the airline said in a statement on 31 October reported by Malay Mail.

Its own IT systems weren't compromised, the airline says. There is "currently no evidence that financial information has been accessed". How many customers are affected, which kinds of personal data were involved and when it learned of the breach, it hasn't said.

Other airlines in the same breach

Japan Airlines, All Nippon Airways, Korean Air, Asiana Airlines, Cathay Pacific and Star Flyer are also caught up in it, Malay Mail reports. Korean Air said the intruders used login credentials assigned to an account in Amadeus's system and that Amadeus notified it on the night of 20 October.

What customers should do

Malaysia Airlines asks customers to watch for suspicious or unsolicited messages, especially any that ask for personal or financial details, according to its statement.