Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

Japan Airlines says Amadeus breach exposed passenger data

2 sources · 2 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Japan Airlines says an Amadeus reservation-system breach exposed data on about 90,000 to 92,000 customers; cards and flights were unaffected.

Japan Airlines said Amadeus IT Group, which runs its reservation, ticketing and check-in systems, told it that hackers accessed a portion of reservation data for Japan Airlines and Japan Transocean Air. The Record reports 92,000 customers affected; BleepingComputer reports about 90,000, with names, reservation codes and flight details exposed. Both say roughly 2,000 also lost passport and contact data; BleepingComputer adds nationality and frequent-flyer numbers. JAL said card numbers were not taken, flights were unaffected, and it has no evidence of misuse. BleepingComputer says ANA, Asiana Airlines and Korean Air have also reported impact from the Amadeus flaw.

Key facts
  • Access window reported as August 10, 2023, through September 23, 2026.
  • Amadeus notified Japan Airlines on October 23, 2026.
  • About 2,000 customers also had passport and contact data exposed.
  • Credit card numbers and passwords were not compromised, Japan Airlines said.
  • On October 1 Amadeus said it found a booking-display flaw and saw no ransomware.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Aug 10, 2023Unauthorized access to the Passenger Service System began. · BleepingComputer
  2. Sep 23, 2026Reported unauthorized access window ended. · BleepingComputer
  3. Oct 1, 2026Amadeus said it found a booking-display flaw. · BleepingComputer
  4. Oct 23, 2026Amadeus notified Japan Airlines of the access. · BleepingComputer

What each outlet adds

beyond the shared facts
  • The RecordCites 92,000 customers and a cabinet push for emergency cyber measures.
  • BleepingComputerGives the access dates, notification date, and other affected airlines.
Vendors
AmadeusAmadeus IT Group
Products
Passenger Service System
Victims
Japan AirlinesAll Nippon AirwaysAsiana AirlinesKorean AirJapan Transocean Air
Countries
JapanSouth Korea

Coverage

oldest first · one row per article · UTC
  1. · 2d ago The RecordFirst report

    Japan Airlines says Amadeus breach exposed 92,000 customer records

    About 2,000 of those customers also lost passport, frequent-flyer, email and phone data; flights and cards were unaffected.

  2. · 1d ago BleepingComputer

    Japan Airlines says Amadeus breach exposed about 92,000 passengers

    About 2,000 also had passport numbers and contacts exposed; access ran from August 2023 to September 2026.