What happened
Amadeus is the company behind the booking, ticketing and check-in system a lot of airlines run on. Someone logged into that system with an Amadeus account login and looked at airline reservation records. Airlines say the access ran from August 2023 to September 23, 2026.
Amadeus started telling airlines around October 20. Since then these carriers have confirmed their passengers were affected: Japan Airlines and Japan Transocean Air (about 92,000 customers), Cathay Pacific (about 53,000 bookings), ANA (about 37,800 passengers), Jin Air (1,454 members), Star Flyer (count still being checked), Korean Air and Asiana Airlines (counts not disclosed). Condor was also named as affected in a Bloomberg report.
Amadeus works with hundreds of airlines, so this list may grow.
What data was exposed
For most people it was booking info: booking reference (PNR), passenger name, flight date, route and cabin class.
For a smaller group (about 2,000 at JAL, about 1,700 at ANA, a smaller subset at Cathay) it also included email address and phone number, passport number and nationality, frequent flyer number, ticket number, flight number and seat.
The airlines say no credit card numbers or passwords were taken, and so far none of them have seen the data misused.
What to do now
- 01Watch for fake airline emails and texts. A scammer who knows your name, booking code and route can write a very believable your flight changed message. Open the airline app or type the site in yourself before you click anything.
- 02Your booking code plus last name is often enough to open a trip online. If you have an upcoming trip, sign in and check that nothing about it has changed.
- 03Check your frequent flyer account for points you did not spend, and add or change its PIN or password if the airline lets you.
- 04If you are told your passport number was involved, you do not need to panic. A passport number alone cannot be used to travel. Just be extra careful with anyone asking for a photo of your passport or other ID.
- 05Airlines say they will contact affected people directly. Go by that notice for what was in your own record.
How to check if you were affected
The airline's notice is the only way to know for sure. JAL says it has already emailed affected customers. ANA, Cathay Pacific and Star Flyer say they will contact people individually.
Have I Been Pwned is free and shows public breaches tied to your email once the data has been verified and loaded there. Reservation data like this may not show up there unless it is leaked publicly.
OSINT Pro's email lookup shows where your email has turned up across breach data and stealer logs. We are not claiming it includes Amadeus or airline data unless that is later confirmed.