Malaysia Airlines has warned that some of its customers’ personal information may have been exposed following a cybersecurity incident involving Amadeus, the technology company
responsible for providing its reservation systems.
The Malaysian flag carrier said on Sunday that the incident could have affected customer information processed through the booking technology provider between August 2023 and September 2026.
The airline is the latest major international carrier to disclose potential data exposure linked to the Amadeus breach, following similar announcements by Cathay Pacific, Japan Airlines and South Korea’s Asiana Airlines.
In a statement, Malaysia Airlines said it was working closely with Amadeus and other relevant parties to investigate the incident and determine the extent of any potential compromise.
The company stressed that its own information technology infrastructure had not been breached. It also said there was currently no evidence indicating that customers’ financial information had been accessed.
Nevertheless, the airline urged passengers to exercise caution when receiving unexpected communications. Customers were advised to remain alert to suspicious messages, particularly those requesting personal details, banking information or other sensitive data.
The incident has raised concerns across the aviation industry, as airlines increasingly depend on third-party technology providers to manage reservations, passenger information and other essential services.
Amadeus, a major provider of travel booking and distribution technology, said it had identified a vulnerability affecting an environment used to display travel reservations. The company has not disclosed how many customers may have been affected.
The breach has already prompted disclosures from several international airlines. Cathay Pacific reported that information associated with approximately 53,000 bookings had been affected, while Japan Airlines said the incident involved data relating to around 92,000 customers.
The latest disclosures highlight the potential risks associated with shared digital infrastructure in the global travel industry, where a cybersecurity incident involving a single technology provider can have consequences for multiple airlines and their passengers.
Malaysia Airlines said its investigation was ongoing and that it would continue working with the relevant parties to establish the full impact of the incident. Photo by Md Shaifuzzaman Ayon, Wikimedia commons.
