Singapore Airlines Amadeus Data Breach: About 46,000 Booking Records Accessed, 620 May Include Travel Document Details

Singapore Airlines says data from about 46,000 SIA booking records was compromised in the breach at Amadeus, the company that runs its reservation system. In every one of those records the intruders could see customers' names, booking reference numbers, travel itineraries and booking classes, Reuters reported. For about 620 of them, email addresses, phone numbers, travel document details and KrisFlyer membership numbers may have been accessed too, an SIA spokesperson said on 3 November.

Amadeus told the airline that bank account or credit card information had not been leaked and bookings were not modified. SIA's own systems weren't breached, its spokesperson said: "The incident was confined to Amadeus' platform". SIA has informed the relevant authorities without naming them.

The airline hasn't said which travel dates the records cover or whether Scoot bookings are among them.

This is SIA's third data incident since 2021. The 2021 SITA breach reached about 580,000 KrisFlyer and PPS members, and a 2022 KrisShop phishing case hit 4,749 customers.

What Amadeus has said

Amadeus said in an October statement that it "became aware of a vulnerability affecting a travel booking display environment" and has fixed it. There are "no indications that this vulnerability has been exploited for ransomware purposes", the company says. It notified Japan Airlines on 23 October that the unauthorised access ran from 10 August 2023 to 23 September 2026. Amadeus hasn't said how many passengers were affected across its airline clients.

Other airlines in the breach

Cathay Pacific puts its count at 53,000 bookings and Japan Airlines at 92,000 customers; ANA reported about 37,800. Korean Air, Asiana and Malaysia Airlines are also on the list of affected carriers, with no published counts. Malaysia Airlines warned its customers on 31 October.

What SIA customers should do

SIA says it is directly contacting affected customers with upcoming travel to change their booking reference numbers, as a precaution. Customers who get that message should follow it.