Singapore Airlines said about 46,000 booking records were accessed without authorization in a cybersecurity incident involving Amadeus, its reservation technology provider.
The incident was confined to Amadeus’ platform, and SIA’s own IT systems were not breached, the airline said in its disclosure.
The accessed information included customers’ names, booking reference numbers, travel itineraries and booking classes. For about 620 records, email addresses, phone numbers, travel document details and KrisFlyer membership numbers may also have been accessed, according to the airline’s reported figures. Amadeus confirmed that bank account and credit card information was not exposed and no bookings were changed.
SIA said it was contacting affected customers with upcoming travel to change their booking reference numbers as a precaution. The airline also said it had informed the relevant authorities. The public reports did not specify when the unauthorized access occurred.
In an October statement, Amadeus said a vulnerability in a travel booking display environment made certain booking-display data accessible. The company said it had fixed the vulnerability and enhanced monitoring and detection, and found no evidence that payment or financial data was accessed.
The same Amadeus incident has prompted disclosures from other carriers, including Qantas’ investigation into possible booking-data exposure, ANA’s report that data for about 37,800 customers may have been accessed, and Malaysia Airlines’ warning that some customer information may be affected.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
