Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data breaches traced back to Amadeus IT Group — a company that builds and maintains platforms for flight reservation, ticketing and check-in platforms. A spokesperson for Amadeus told Recorded Future News that it recently became aware of a vulnerability affecting a travel booking display environment. “Certain booking-display data was accessible through the vulnerability.
Although our investigations continue, we can confirm that there is no evidence that payment or financial data was accessed,” the spokesperson said. “There are no indications that this vulnerability has been exploited for ransomware purposes. Amadeus implemented measures to fix the vulnerability as well as enhanced monitoring and detection capabilities.
We are in direct dialogue with our customers and authorities.” The company declined to say whether the attackers have contacted them or how many total victims were impacted by the attack. Japan Airlines said 92,000 customers had information stolen and Singapore Airlines said 46,000 records were accessed.
