A reservation system incident at Amadeus exposed data tied to about 46,000 Singapore Airlines booking records, the airline said Tuesday, Nov. 3, putting travelers’ personal information at risk.
The accessed information included customers’ names, itineraries, reservation codes and booking classes, Singapore Airlines said. For about 620 records, the data may also have included KrisFlyer membership numbers, travel document details, email addresses and phone numbers.
Singapore Airlines said Amadeus confirmed that no bank account or credit card details were leaked and existing bookings were left unchanged. The airline said its own IT systems were not breached. It is contacting customers with upcoming travel and replacing their booking reference numbers as a precaution.
Amadeus said a vulnerability came to its attention in a system used to display travel bookings. Reuters said the company did not respond to its question about how many customers may have been affected.
Other airline disclosures cite different measures. Cathay Pacific reported about 53,000 affected bookings. Reuters reported that Japan Airlines and Japan Transocean Air together identified about 92,000 affected customers, and that South Korea’s Asiana Airlines reported compromised customer data. Malaysia Airlines also said information handled by Amadeus may have been affected, as EconoTimes reported in its earlier coverage of the airline’s disclosure. These figures count bookings or customers and do not establish a combined total of unique travelers.
