Singapore Airlines says 46,000 booking records were affected by Amadeus breach

Singapore Airlines says 46,000 booking records were affected by a breach involving Amadeus, a Spanish technology company that provides reservation and passenger-management systems to airlines and airports.

The airline said the records included customers’ names, booking reference numbers, travel itineraries and booking classes. In a smaller group of around 620 booking records, the exposed information also included email addresses, phone numbers, travel document details and KrisFlyer membership numbers.

According to Reuters, Singapore Airlines is contacting affected customers with upcoming travel plans to change their booking reference numbers as a precaution. The airline said its own IT systems were not breached.

Amadeus previously said it had identified a vulnerability affecting a travel booking display environment. The company said some booking-display data was accessible to attackers, but that there was no evidence payment or financial data had been accessed. It also said it had fixed the vulnerability and strengthened monitoring and detection.

The breach has also been reported by other airlines. Singapore Airlines’ disclosure adds 46,000 records to the cases reported in connection with the Amadeus incident. The source report said there was no indication the stolen data had appeared on the dark web and no threat actor had claimed responsibility.