Singapore Airlines says about 46,000 bookings were reached in the Amadeus breach

Singapore Airlines (SIA) is the latest airline to say its passengers’ bookings were reached in the breach at Amadeus, the company whose reservation system many airlines use. On November 3, 2026, an SIA spokesperson told The Straits Times that about 46,000 SIA booking records were accessed by a third party. If you’ve booked with SIA, here’s what the airline has said, how it fits with what other airlines have reported, and what’s worth doing.

What Singapore Airlines said

According to the spokesperson, the data accessed in those 46,000 booking records included:

• passenger names
• booking reference numbers
• travel itineraries
• booking classes

For a much smaller group, about 620 booking records, more may have been seen: email addresses, phone numbers, travel document details and KrisFlyer membership numbers.

SIA says Amadeus has confirmed that no bank account or credit card information was exposed and that no booking was changed. The airline says the incident was confined to Amadeus’ platform and didn’t involve a breach of SIA’s own IT systems, and that Amadeus has told it containment measures and extra safeguards are now in place. SIA has informed the relevant authorities. As a precaution, it is contacting affected customers who have upcoming travel directly to change their booking reference numbers. “SIA sincerely apologises to affected customers for any inconvenience caused,” the spokesperson said.

SIA hasn’t said publicly over what period the affected bookings were made. The other airlines in this breach describe access to bookings processed between August 2023 and September 2026, but we don’t know yet whether SIA’s window is the same.

How this fits the wider Amadeus breach

This is the third time we’ve covered this breach. In our first story, we explained that someone used valid login details to get into Amadeus and read reservation records for Japan Airlines, Korean Air and Asiana passengers. Then ANA, Cathay Pacific and Malaysia Airlines said their passengers were involved too: about 37,800 ANA customers and about 53,000 Cathay Pacific bookings. Singapore Airlines’ count sits in the same range, and its split looks similar. Most affected bookings show a name, a booking reference and a route, while a small share also show contact details, passport or travel document information and a frequent flyer number.

The pattern matters because Amadeus sits behind the scenes. You never signed up with it, but when you book a flight, many airlines store and display your booking through its systems. That’s why one breach at one supplier keeps producing new statements from different airlines, each counting only its own passengers. The Straits Times notes that SIA joins a growing list that already includes Malaysia Airlines, Cathay Pacific, Japan Airlines and Asiana Airlines. More may still come forward.

What this means for you

A booking reference plus a surname is often all it takes to open a booking on an airline’s website. That’s why SIA is changing booking references for affected customers with trips coming up: once the reference changes, the old one stops working. The bigger risk for most people is scams. A message that quotes your real name, flight and booking class is much easier to believe than a generic one, and it could ask you to “confirm” a payment, pay a fee or hand over a KrisFlyer login.

If you’re in the group of about 620 bookings, your email, phone number and travel document details may also have been seen, so expect more targeted attempts, including by phone. Nothing SIA has described gives someone your password or your card.

What you can do

1. Watch for SIA’s message if you have an upcoming trip. SIA says it is contacting affected customers directly to change their booking reference. If the reference on your booking changes, use the new one.
2. Check your booking in the SIA app or on singaporeair.com yourself, not through a link in an email or text. Make sure the names, flights and contact details are what you expect.
3. Look at your KrisFlyer account for redemptions, transfers or changes you didn’t make, and make sure its password isn’t used anywhere else.
4. Don’t trust a message just because it knows your flight. Never pay a surprise fee or share a card number, one-time code or password after an unexpected call, email or text about your booking.
5. Learn the patterns. See how scammers use leaked data.

How Frame helps

Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Frame can also look up your verified emails in Have I Been Pwned’s breach database. Frame’s email aliases also let you book travel with an address of its own, so a leak in a booking system doesn’t lead scammers straight to your main inbox. Frame never collects or stores the leaked records themselves.

Related coverage

• Amadeus breach: ANA, Cathay Pacific and Malaysia Airlines say their passengers’ bookings were reached too: the airlines that came forward before SIA, with their own counts.
• The first Amadeus story: how the breach was found, and the Japan Airlines, Korean Air and Asiana reports.

Sources

• The Straits Times, 46,000 SIA booking records accessed illegally in data breach affecting software provider Amadeus, November 3, 2026
• All Nippon Airways, Regarding Unauthorized Access to Passenger Service System Provided by Amadeus, October 30, 2026
• Cathay Pacific, Personal data security incident involving a third-party service provider, October 30, 2026