Unauthorized access to Amadeus system affects multiple airlines

On November 2, 2026, PhocusWire reported that an unauthorized access incident occurred in a system operated by Amadeus, with multiple airlines reporting that passenger booking data was exposed, and some cases involving passport numbers and contact details. Cathay Pacific said the unauthorized party used credentials assigned to an Amadeus system account to access booking data. The access timeframes disclosed by Japan Airlines and Cathay Pacific span from August 2023 to September 2026. On November 5, TravelDaily China reported that Cathay Pacific, Japan Airlines, ANA and other airlines disclosed that their passenger booking records were leaked due to unauthorized access to the Amadeus system, involving bookings during the period from August 2023 to September 2026. The reports currently do not disclose the specific number of affected passengers, the complete list of affected airlines, or the progress of incident handling.