Malaysia Airlines says customers may be affected by Amadeus breach
- Malaysia Airlines said its IT systems were not breached and there was no evidence that financial information had been accessed
Malaysia Airlines confirmed a cybersecurity incident via its reservation provider Amadeus, potentially affecting customer information processed between August 2023 and September 2024, similar to other airlines.
- The Amadeus cybersecurity breach impacting multiple airlines.
- Malaysia Airlines' customer data potentially compromised from August 2023.
- Assurance that Malaysia Airlines' internal IT systems were not breached.
SINGAPORE: Malaysia Airlines said on Sunday that some customer information may have been affected by a cybersecurity incident involving Amadeus, its reservation-technology provider.
The airline joins Cathay Pacific Airways, Japan Airlines, South Korea’s Asiana Airlines and others in recent days that have reported customer data was compromised in the Amadeus breach.
Malaysia’s flag carrier said in a statement that the incident may have affected information processed between August 2023 and September this year.
The airline said it is working with Amadeus and relevant parties to investigate the incident and assess its impact.
Malaysia Airlines said its IT systems were not breached and there was no evidence that financial information had been accessed.
The airline encouraged customers to remain vigilant against suspicious or unsolicited communications, particularly those requesting personal or financial information.
Amadeus said it had become aware of a vulnerability affecting a travel booking display environment but did not respond to a question on how many customers’ data were affected.
In recent days Cathay Pacific and Japan Airlines reported that the breach had affected data involving 53,000 bookings and 92,000 customers, respectively.