Malaysia Airlines says some customer information processed through Amadeus, its third-party reservation technology provider, may have been affected by a cybersecurity incident.
In a notice dated October 31, the airline said the potentially affected information was processed between August 2023 and September 2026. It has not disclosed how many customers may be affected or which types of information were involved.
The carrier said its own IT systems were not compromised and that there is currently no evidence financial information was accessed. Malaysia Airlines is working with Amadeus and other relevant parties to investigate the incident and determine its impact.
Amadeus said in an October statement about the wider incident that a vulnerability in a travel booking display environment made certain booking-display data accessible. The company said it had fixed the vulnerability, strengthened monitoring and detection, and was working with customers and authorities.
The disclosure adds Malaysia Airlines to a growing list of carriers affected by unauthorized access to Amadeus reservation data. Japan Airlines reported about 92,000 affected customers, while All Nippon Airways said information for about 37,800 passengers may have been accessed. The disclosures underscore the risk of a single third-party reservation provider holding booking information for multiple airlines.
What users should do
Malaysia Airlines is urging customers to be alert for suspicious or unsolicited messages, especially those asking for personal or financial information. Do not click unexpected travel-related links or share sensitive details in response to a message. Check bookings by opening the airline’s official website or app directly, and contact customer service through verified channels if anything looks unfamiliar.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
