Thai Airways International said unauthorized access to booking data at Amadeus IT Group may have affected about 60,529 passenger records, with about 376 additional passenger records also potentially affected; the extra files could include passport and contact details.
The airline’s Nov. 9 statement dated the affected Amadeus booking-data period from Aug. 10, 2023, through Sept. 23, 2026. Potentially affected files could list passenger names and reservation codes, alongside trip dates, routes and cabin assignments, Thai Airways said.
Thai Airways said the 376 additional records could also hold passport numbers, email and phone details, nationality, frequent-flyer membership numbers, plus flight, ticket or seat identifiers.
Thai Airways said credit card information was unaffected. As of its statement, the airline had not identified any disclosure of the data; it also said its own systems and operations were not affected.
Thai Airways said Amadeus invalidated the credentials used to reach the records and reset passwords tied to the incident. The airline said the provider added monitoring and detection safeguards.
Cathay Pacific also reported that about 53,000 of its bookings were affected by unauthorized access to Amadeus data, as covered in an earlier EconoTimes report on Cathay’s affected bookings.
Thai Airways has notified regulators and continues checking data supplied by Amadeus. It said it would contact each affected passenger after completing its review and validating the relevant information.
