Malaysia Airlines said customer information processed by reservations provider Amadeus may have been affected by a cybersecurity incident, extending a data security problem that has prompted disclosures from several airlines.
The airline’s Oct. 31 notice covers information handled from August 2023 through September 2026. It did not say how many customers may be affected. Malaysia Airlines said it found no breach of its own systems and no evidence that financial information was accessed.
Amadeus said the issue involved a vulnerability in a system used to display travel bookings. Other airlines have reported different measures of its impact: Cathay Pacific said about 53,000 bookings were affected, while Japan Airlines and Japan Transocean Air reported about 92,000 affected customers combined. The booking and customer figures should not be treated as a single customer count.
Malaysia Airlines said it is reviewing the incident with Amadeus and other parties. It advised customers to watch for unexpected messages requesting personal or financial details and said it would provide updates as it learns more.
