THAI passenger data compromised in Amadeus security breach

Incidents took place over three years, no credit card data affected

PUBLISHED : 10 Nov 2026 at 14:47

More than 60,000 passenger bookings on Thai Airways International (THAI) were compromised over a three-year period by cybersecurity breaches on the Amadeus booking and ticketing platform, according to the national carrier.

The breaches of the reservation system operated by Amadeus involved misused account credentials and happened between Aug 10, 2023 and Sept 23 this year.

An investigation showed that 60,529 bookings by THAI passengers were compromised. The hacked data included passengers’ names and reference numbers, travel dates, flight routes and the classes of reserved seats.

In 376 of the affected bookings, exposure also included other types of data such as email addresses, phone numbers, passport numbers, nationalities, mileage membership numbers, flight numbers, ticket numbers and seat numbers.

Thai Airways stressed that credit card details were not affected and its own systems and operations remained unaffected.

It said it was verifying information from Amadeus and it apologised for concern and inconveniences caused.

Other affected users of the Amadeus system included Cathay Pacific, Singapore Airlines, Japan Airlines, Korean Air, Asiana Airlines and Finnair.