Breach · · 3 min read
Amadeus breach: airline booking records accessed, including JAL, Korean Air and Asiana
Airline booking system Amadeus told carriers someone used valid login details to reach reservation data. JAL says about 92,000 of its customers are affected.
Amadeus runs the reservation, ticketing and check-in systems behind many of the world’s airlines. Several carriers have now said that someone got into those systems and looked at their passengers’ booking records. Payment card details weren’t included. If you’ve flown with one of these airlines in the last few years, here’s what is known.
What happened
Korean Air and Asiana Airlines said on October 23, 2026 that Amadeus had told them about signs of a leak from its systems, The Asia Business Daily reported. The airlines said the access came from someone using login details assigned to an account in Amadeus’ system, and that it may have happened between August 2023 and September 2026. Both said they found no sign that their own systems were breached. Asiana said payment information was not included.
On October 28, Japan Airlines and Japan Transocean Air said Amadeus told them on October 23 that part of their customers’ reservation data had been accessed from outside. JAL gave the clearest breakdown so far:
- about 90,000 customers: booking reference (PNR), name, flight date, route and class of service
- about 2,000 of them also had email address, phone number, passport number, nationality, frequent flyer number, ticket number and seat number accessed
JAL says no credit card numbers or passwords were affected, that Amadeus has finished its security fixes, and that there is no evidence so far that anyone’s information has been misused. Flights aren’t affected.
What this means for you
A booking reference and your name are often all it takes to open a booking on an airline’s website. So the main risk is scams that sound real: a message quoting your actual flight, asking you to “confirm” details, pay a fee or claim a refund. For the smaller group whose passport number and contact details were seen, expect more targeted attempts.
Amadeus serves many airlines, and the number of carriers and passengers involved may still grow as others finish checking.
What you can do
- Watch for messages from your airline. JAL says it will contact affected customers one by one. Korean Air and Asiana are still investigating.
- Don’t trust a message just because it knows your flight. Open your airline’s app or type its website address yourself, rather than using a link.
- Never pay a surprise fee or share a card number to “fix” a booking after an unexpected call or text.
- Check upcoming bookings for changes you didn’t make, and add a PIN or passkey to your frequent flyer account if the airline offers one.
- Learn the patterns. See how scammers use leaked data.
How Frame helps
Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Automatic breach lookups aren’t live yet. Frame’s email aliases also let you book travel with an address of its own, so a leak in a booking system doesn’t lead scammers straight to your main inbox. Frame never collects or stores the leaked records themselves.
Sources
- Japan Airlines, Regarding Unauthorized Access to Amadeus Passenger Service System, October 28, 2026
- The Asia Business Daily, Korean Air, Asiana Customer Information Leaked Through IT Service Provider, October 23, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.