The Data Leak Behind Your Flight Booking Wasn’t at the Airline

On November 4, Singapore Airlines said about 46,000 booking records may have been affected by a breach at Amadeus, the reservation technology provider it uses. The airline stressed that its own IT systems were not breached and that no bookings were altered, and said it is contacting affected customers with upcoming travel and changing their booking references.

The exposed records may have included names, booking references, itineraries and booking classes. Roughly 620 of them may also have contained emails, phone numbers, travel document details and KrisFlyer loyalty numbers. Amadeus says no bank or credit card data leaked, and it cited a vulnerability in a travel booking display environment without giving an overall count.

Singapore Airlines is not alone. Earlier disclosures, dating from October 30, named Cathay Pacific, with about 53,000 bookings, Japan Airlines, with about 92,000 customers, and ANA, with up to 37,800. Malaysia Airlines said data was processed between August 2023 and September 2026, and Korean Air, Condor and Asiana were also mentioned.

What should travelers do? Watch for messages from your airline, treat unexpected emails or calls about your booking with suspicion, and avoid sharing passport or payment details with anyone who contacts you first. Where the airline offers it, a new booking reference can make old details less useful to scammers.

Sources: Punjab Kesari (Reuters report), The Star