Asian Airlines Report Data Breaches Tied to Amadeus IT Provider

· Cybersecurity · Japan · South Korea

Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all reported data breaches over the past week traced back to Amadeus IT Group, which builds and maintains platforms for flight reservation, ticketing and check-in. The airlines disclosed the incidents in recent days, but the reports did not specify how many passengers were affected or what data was taken. Amadeus is a major shared technology provider to the airline industry, so a compromise at the vendor can expose customer data across multiple carriers at once. The immediate effect is a wave of breach notifications and heightened attention to third-party risk in aviation IT.

Why it matters:A single shared reservations and check-in provider being linked to breaches at six carriers shows how concentrated aviation IT vendors amplify third-party risk across the industry.

Key points

  • Six Asian carriers disclosed breaches traced to Amadeus IT Group within a week.
  • Amadeus builds and maintains flight reservation, ticketing and check-in platforms.
  • The reports did not specify the number of affected passengers or the data involved.

Sources (original reporting)

More stories from this day