Malaysia Airlines' systems untouched by data breach

KUALA LUMPUR: Malaysia Airlines Bhd said its information technology (IT) systems have not been compromised by a cybersecurity incident involving its third-party technology provider, Amadeus IT Group S.A.

However, certain customer information may have been affected.

"The incident may have affected customer information processed through Amadeus between August 2023 and September 2026. We wish to reassure customers that Malaysia Airlines' own IT systems have not been compromised and there is no evidence that financial information has been accessed," it said in a statement on its website.

It has not disclosed how many customers may have been affected or the types of personal information potentially accessed.

The incident comes as several international airlines have reported unauthorised access to passenger reservation data held by Amadeus, a Spain-based travel technology company that provides reservation and other technology services to airlines worldwide.

On Oct 30, Cathay Pacific Airways Ltd said that 53,000 of its bookings were affected by unauthorised access to passenger reservation data held by Amadeus.

The Hong Kong-based airline said most affected records included booking references, passenger names and flight details.

A smaller number may have included email addresses, phone numbers, travel document information and frequent flyer numbers.

Cathay Pacific said there was no evidence that financial or payment information had been accessed, while its own systems and flight operations remained unaffected.

"Amadeus confirmed that it has taken actions to contain the incident, including a password reset, and has implemented enhanced monitoring and detection capabilities on its systems.

"To date, Amadeus has not identified evidence that the affected data has been misused."

Other airlines affected include Japan Airlines Co Ltd and Japan Transocean Air Co Ltd, which reported that about 92,000 customers were affected, while All Nippon Airways Co Ltd said information relating to about 37,800 customers had been accessed.

South Korea's Korean Air Co Ltd and Asiana Airlines Inc also reported unauthorised access to customer reservation information through Amadeus.